Doc scoped permissions