user 'projetable_Eurpcf_Gest_01' is member of the group 'eurpcf_p_gestionnaires'
the exception is thrown by the method getDocument(new PathRef("/pc-de-force/workspaces/import")), see code below (line 2).
while the user has the 'Read' permission via the 'Coordonnateur' permission, see eurpcf-permissions-contrib.xml & eurpcf-permissions-contrib.xml

-----------------------------------------------------------------------------------
the code : 
-----------------------------------------------------------------------------------
// open a user session
CoreSession documentManager = getCoreSession(new NuxeoPrincipalImpl("projetable_Eurpcf_Gest_01"));
// get the target container
DocumentModel targetContainer = documentManager.getDocument(new PathRef("/pc-de-force/workspaces/import"));
importDocument = sicmlService.importDocument(documentGED, dm, parent, targetDocumentType);

-----------------------------------------------------------------------------------
/eurpcf-main/src/main/resources/OSGI-INF/eurpcf-content-template-contrib.xml : 
-----------------------------------------------------------------------------------
<factoryBinding name="WorkspaceFactory" factoryName="SimpleTemplateFactory" targetType="WorkspaceRoot">
	<template>
		<templateItem typeName="ImportWorkspace" id="import" title="%i18nImportFolder" description="Import folder">
		  <acl>
			<ace granted="True" userName="eurpcf_p_traitants" permission="AddChildren" />
			<ace granted="True" userName="eurpcf_p_gestionnaires" permission="Coordonnateur" />
		  </acl>
		</templateItem>
	</template>
</factoryBinding>
	
-----------------------------------------------------------------------------------
/eurpcf-main/src/main/resources/OSGI-INF/eurpcf-permissions-contrib.xml : 
-----------------------------------------------------------------------------------
<permission name="Lecteur">
  <include>Read</include>
</permission>
<permission name="Redacteur">
  <include>Lecteur</include>
  <include>AddChildren</include>
  <include>RemoveChildren</include>
</permission>
<permission name="Valideur">
  <include>Redacteur</include>
  <include>WriteProperties</include>
  <include>CanValidateBriefing</include>
  <include>CanValidateProduction</include>
</permission>
<permission name="Coordonnateur">
  <include>Valideur</include>
  <include>CanCreateBriefing</include>
  <include>CanCreateCollabProduction</include>
</permission>


-----------------------------------------------------------------------------------
Thrown exception
-----------------------------------------------------------------------------------
org.nuxeo.ecm.core.api.DocumentSecurityException: Privilege 'Read' is not granted to 'projetable_Eurpcf_Gest_01'
    at org.nuxeo.ecm.core.api.AbstractSession.checkPermission(AbstractSession.java:272)
    at org.nuxeo.ecm.core.api.AbstractSession.getDocument(AbstractSession.java:914)
    at org.nuxeo.ecm.core.api.ejb.DocumentManagerBean.getDocument(DocumentManagerBean.java:213)
    at sun.reflect.GeneratedMethodAccessor451.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    at java.lang.reflect.Method.invoke(Method.java:585)
    at org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation.java:112)
    at org.jboss.ejb3.interceptor.InvocationContextImpl.proceed(InvocationContextImpl.java:166)
    at org.nuxeo.ecm.core.api.ejb.DocumentManagerCacheStatInterceptor.countCall(DocumentManagerCacheStatInterceptor.java:71)
    at sun.reflect.GeneratedMethodAccessor427.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    at java.lang.reflect.Method.invoke(Method.java:585)
    at org.jboss.ejb3.interceptor.InvocationContextImpl.proceed(InvocationContextImpl.java:118)
    at org.jboss.ejb3.interceptor.EJB3InterceptorsInterceptor.invoke(EJB3InterceptorsInterceptor.java:63)
    at org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation.java:101)
    at org.jboss.ejb3.entity.ExtendedPersistenceContextPropagationInterceptor.invoke(ExtendedPersistenceContextPropagationInterceptor.java:57)
    at org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation.java:101)
    at org.jboss.ejb3.entity.TransactionScopedEntityManagerInterceptor.invoke(TransactionScopedEntityManagerInterceptor.java:54)
    at org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation.java:101)
    at org.jboss.ejb3.AllowedOperationsInterceptor.invoke(AllowedOperationsInterceptor.java:46)
    at org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation.java:101)
    at org.jboss.aspects.tx.TxPolicy.invokeInOurTx(TxPolicy.java:79)
    at org.jboss.aspects.tx.TxInterceptor$Required.invoke(TxInterceptor.java:191)
    at org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation.java:101)
    at org.jboss.aspects.tx.TxPropagationInterceptor.invoke(TxPropagationInterceptor.java:76)
    at org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation.java:101)
    at org.jboss.ejb3.stateful.StatefulInstanceInterceptor.invoke(StatefulInstanceInterceptor.java:83)
    at org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation.java:101)
    at org.jboss.aspects.security.RoleBasedAuthorizationInterceptor.invoke(RoleBasedAuthorizationInterceptor.java:166)
    at org.jboss.ejb3.security.RoleBasedAuthorizationInterceptor.invoke(RoleBasedAuthorizationInterceptor.java:108)
    at org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation.java:101)
    at org.jboss.aspects.security.AuthenticationInterceptor.invoke(AuthenticationInterceptor.java:77)
    at org.jboss.ejb3.security.Ejb3AuthenticationInterceptor.invoke(Ejb3AuthenticationInterceptor.java:102)
    at org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation.java:101)
    at org.jboss.ejb3.ENCPropagationInterceptor.invoke(ENCPropagationInterceptor.java:47)
    at org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation.java:101)
    at org.jboss.ejb3.asynchronous.AsynchronousInterceptor.invoke(AsynchronousInterceptor.java:106)
    at org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation.java:101)
    at org.jboss.ejb3.stateful.StatefulContainer.localInvoke(StatefulContainer.java:203)
    at org.jboss.ejb3.stateful.StatefulLocalProxy.invoke(StatefulLocalProxy.java:98)
    at $Proxy293.getDocument(Unknown Source)
    at com.nuxeo.project.eurocis.bri.connector.ImporterServlet.doPost(ImporterServlet.java:171)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:810)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
    at org.nuxeo.ecm.platform.ui.web.rest.FancyURLFilter.doFilter(FancyURLFilter.java:115)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
    at org.nuxeo.ecm.platform.ui.web.shield.NuxeoExceptionFilter.doFilter(NuxeoExceptionFilter.java:104)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
    at org.jboss.seam.servlet.SeamExceptionFilter.doFilter(SeamExceptionFilter.java:46)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
    at org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:96)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
    at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)
    at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178)
    at org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(SecurityAssociationValve.java:175)
    at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:74)
    at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)
    at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)
    at org.jboss.web.tomcat.tc5.jca.CachedConnectionValve.invoke(CachedConnectionValve.java:156)
    at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)
    at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)
    at org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:199)
    at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:282)
    at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:767)
    at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:697)
    at org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:889)
    at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)
    at java.lang.Thread.run(Thread.java:595)