Merge change 21977 into donut

* changes:
  docs only. add reference information for new <path-permission> element