* fix: Update document policy to disable sharing for read-only users * test: Update test for new permission logic