document 1 before: Document[id=1, owner=alice, team=team-a, title=Q3 plan]
carol update(forged owner=carol) -> ALLOWED
document 1 after:  Document[id=1, owner=carol, team=team-b, title=hijacked]
carol updateTitle(1, "hijacked") -> DENIED  (AuthorizationDeniedException: Access Denied)
document 1 after:  Document[id=1, owner=alice, team=team-a, title=Q3 plan]