SELECT docid,docname,doctype,date_created, date_updated, rev 
    FROM xml_documents 
      WHERE docid IN 
                    (
                      (
                        SELECT DISTINCT docid FROM xml_path_index WHERE  
                          (UPPER(nodedata) LIKE '%TEST%' 
                             AND path IN ('abstract/para','givenName','keyword','organizationName','title','surName','para','geographicDescription','literalLayout')
                           )
                     )
                    )  
      AND (
           docid IN (
                      SELECT docid from xml_access WHERE( (lower(principal_name) = 'public') AND perm_type = 'allow' AND permission > 3)
                     ) 
            AND 
            docid NOT IN (
                           SELECT docid from xml_access WHERE( (lower(principal_name) = 'public') AND perm_type = 'deny' AND perm_order ='allowFirst' AND permission > 3) 
                         )
           )