Per-view permissions

Support different permissions and ACLs per view (HTTP method). For example, `@service.get(permission="read")` and `@service.put(permission="write")`
These should be in your global .gitignore, not on the project's one.