protecting document access with PLATFORM(DOM)