fix: protect get environment document endpoint

fix: protect get environment document endpoint #6598