BISERVER-8440 Splitting WRITE into more specific permissions