use both guid and docid when creating access row - then either mechanism can be used when retrieving the access rules
use both guid and docid when creating access row - then either mechanism can be used when retrieving the access rules