consider the scenario where you're making these three calls:

check document:firstdoc view user:symion
check document:secondoc edit user:tom
check document:thirddoc can_admin user:sarah