Document Repository permissions revamp

View and upload should be specified in the description.