Role-based access control in online authoring and publishing systems vs. document hierarchy