resource objectType should be

document

, objectID is the document's ID, relation is

deploy

, subject objectType should be

user

and the objectID should be

*