Add a perm. chk for ref. document to update_reference method

Adds permission check for referenced documents to update_reference method, closing Ticket 72600.