Also opens up for a nice pattern I generally end up using, wrapping the "check" function to an "assert" function thay throws if the permission is denied. Works well with your pattern

p.Document('id').view.assert(p.User('someuser'))