Add support within the PermissionDAO for setting perms within the
scope of a given item. Add test in DAOSpec.

Cleanup the way URLs are called within DAOs.