Merge "Ensure user can only share documents from allowed users." into rvc-dev