Fix: Permission "read" of ecm document was not used and replaced by "download". As it is same permission, we moved back to "read" to be uniform with other modules: "read" must be first permission with number XXX1.