New permission VIEW-ANY

[ketan404]

Currently, VIEW-ANY is the default.
The proposed update is to make VIEW-OWN as the default
and VIEW-ANY should be explicitly granted by the maintainer of a collection while adding a user.

Collection/Document controllers will need updates.

Middleware for document access will also need to be updated.