diff --git a/app/controllers/web/console.php b/app/controllers/web/console.php
index b7e8cd731f..f2ffad4162 100644
--- a/app/controllers/web/console.php
+++ b/app/controllers/web/console.php
@@ -5,6 +5,7 @@ use Appwrite\Utopia\Response;
 use Appwrite\Utopia\View;
 use Utopia\App;
 use Utopia\Config\Config;
+use Utopia\Database\Database;
 use Utopia\Domains\Domain;
 use Utopia\Database\Validator\UID;
 use Utopia\Storage\Storage;
@@ -334,12 +335,25 @@ App::get('/console/databases/document')
             ])
         ;
 
+        $permissions = new View(__DIR__ . '/../../views/console/comps/permissions-matrix.phtml');
+        
+        $permissions
+            ->setParam('method', 'databases.getDocument')
+            ->setParam('data', 'project-document')
+            ->setParam('permissions', \array_filter(Database::PERMISSIONS, fn ($perm) => $perm != Database::PERMISSION_CREATE))
+            ->setParam('params', [
+                'collection-id' => '{{router.params.collection}}',
+                'database-id' => '{{router.params.databaseId}}',
+                'document-id' => '{{router.params.id}}',
+            ]);
+
         $page = new View(__DIR__ . '/../../views/console/databases/document.phtml');
 
         $page
             ->setParam('new', false)
             ->setParam('database', $databaseId)
             ->setParam('collection', $collection)
+            ->setParam('permissions', $permissions)
             ->setParam('logs', $logs)
         ;
 
@@ -356,13 +370,25 @@ App::get('/console/databases/document/new')
     ->param('collection', '', new UID(), 'Collection unique ID.')
     ->inject('layout')
     ->action(function (string $databaseId, string $collection, View $layout) {
+        
+        $permissions = new View(__DIR__ . '/../../views/console/comps/permissions-matrix.phtml');
 
+        $permissions
+            ->setParam('data', 'project-document')
+            ->setParam('permissions', \array_filter(Database::PERMISSIONS, fn ($perm) => $perm != Database::PERMISSION_CREATE))
+            ->setParam('params', [
+                'collection-id' => '{{router.params.collection}}',
+                'database-id' => '{{router.params.databaseId}}',
+                'document-id' => '{{router.params.id}}',
+            ]);
+        
         $page = new View(__DIR__ . '/../../views/console/databases/document.phtml');
 
         $page
             ->setParam('new', true)
             ->setParam('database', $databaseId)
             ->setParam('collection', $collection)
+            ->setParam('permissions', $permissions)
             ->setParam('logs', new View())
         ;
 
diff --git a/app/views/console/databases/document.phtml b/app/views/console/databases/document.phtml
index e579ab3757..e201b31fe2 100644
--- a/app/views/console/databases/document.phtml
+++ b/app/views/console/databases/document.phtml
@@ -2,6 +2,7 @@
 
 $new = $this->getParam('new', false);
 $logs = $this->getParam('logs', null);
+$permissions = $this->getParam('permissions', null);
 
 ?>
 <div
@@ -313,19 +314,13 @@ $logs = $this->getParam('logs', null);
                                         </ul>
                                     </fieldset>
 
-                                    <div class="toggle margin-bottom" data-ls-ui-open data-button-aria="Open Permissions">
+                                    <div class="toggle margin-bottom" data-ls-if="{{project-collection.documentSecurity}}" data-ls-ui-open data-button-aria="Open Permissions">
                                         <i class="icon-plus pull-end margin-top-tiny"></i>
                                         <i class="icon-minus pull-end margin-top-tiny"></i>
 
                                         <h3 class="margin-bottom-large">Permissions</h3>
 
-                                        <label for="collection-read">Read Access <span class="text-size-small">(<a data-ls-attrs="href={{env.HOME}}/docs/permissions" target="_blank" rel="noopener">Learn more</a>)</span></label>
-                                        <input type="hidden" id="collection-read" name="read" data-forms-tags data-cast-to="json" data-ls-bind="{{project-document.$read}}" placeholder="User ID, Team ID or Role" />
-                                        <div class="text-fade text-size-xs margin-top-negative-small margin-bottom">Add 'any' for wildcard access</div>
-
-                                        <label for="collection-write">Write Access <span class="text-size-small">(<a data-ls-attrs="href={{env.HOME}}/docs/permissions" target="_blank" rel="noopener">Learn more</a>)</label>
-                                        <input type="hidden" id="collection-write" name="write" data-forms-tags data-cast-to="json" data-ls-bind="{{project-document.$write}}" placeholder="User ID, Team ID or Role" />
-                                        <div class="text-fade text-size-xs margin-top-negative-small margin-bottom">Add 'any' for wildcard access</div>
+                                        <?php echo $permissions->render() ?>
                                     </div>
 
                                     <button data-ls-if="({{project-document.$id}})">Update</button>