yeap, the one and only
in the normal db we store only document and who created it, but no other relationships
roles are really straightforward right now - editor, viewer, suggester. In the CRUD endpoints we operate those roles.
in create endpoint - assigning creator as an editor by default
in RUD - just checking permissions from user to this object