Enforce read permission on ledger preview endpoints

Ledger preview endpoints were missing permission checks, allowing any authenticated user to read GL/SL data for documents they lack access to.