document access control

Changes to POST /acp/document/policy

post/acp/document/policy