Permission improvements

Permission improvements: Document permissions in Outline currently cascade downward: collection-level permissions grant access to all documents, and document-level permissions are copied to all children via sourceId tracking. Users can remove inherited permissions
from child documents, but they reappear whenever the parent permissions change (because recreateSourcedMemberships() rebuilds them). There is no way to give a sub-document fewer permissions than its parent.