1. use context object to register a document and the return value for document id. 2. use document id to load it's policy. 3. new a LimitList and set desired owner and set the LimitList to the document 4. change the document owner 5. save the document, that document now can only be opened by the desired owner.