Controlling access at the document and field level