[Security] collection-based access rights management

[dsukhoroslov]

• connect users/roles with collections;
• user who has no access to collection will be not able to use its documents..