- allow only admin to create/update document
 - perform some basic checking on structure of newDocument