Adding concept of ownership to sevr-perm should allow users to edit documents they own even if they do not have permission to create/edit other documents.
For example: A user should be able to update their own user account, even when they don’t have access to add/edit other users