KRACOEUS-6294: This PR is the doc level permission code.  It does not include data conversion