and then associated documents that have permissions defined in terms of recursive references to managers