Check write permission in whitelisted document methods

Adds `check_permission("write")` to whitelisted document methods that mutate data, preventing unauthorized modifications.