in this scenario, you'd check if the user can create the doc, then create a relationship for the new doc (which returns a zedtoken), then check if the user can edit the document on opening