KRACOEUS-6294: This PR is the doc level permission code.  It does not include data conversion

Weird that is set automatically in: DerivedRoleTypeServiceBase.  Anyway, I have set it.