A new document must have a "type" field that contains either "paste" or "comment", and must have a "data" field that contains a String.
Non-authenticated users can upload anything, and specifically pastes. They can't update/modify/delete anything. The only authenticated users are database admins. By default, any server admin is a database admin. They are allowed to do everything in the database.