def get_document(doc_id):
user = api.helpers.get_user()
doc = Document.query.get_or_404((doc_id))
xhr = MakeResponse()
if not doc.user_has_access(user, 'read'):
xhr.set_error(401, "Not Authorized")
return xhr.response
res = document_schema.dump(doc)
xhr.set_success(data=res.data)
return xhr.response
