Rename todo
Check if user has access to document, if the target is public of is the user itself, will check if the req method can access it or not