Add permission checks to whitelisted methods and the DocPerm rows they need

Backports the same permission hardening to v16-hotfix, affecting stock, accounting, and CRM workflows.