Yea, read, delete and update permissions are based on explicit roles on the doc itself, or permissions on the parent_org (admin or owner role)