put and delete obviously need write permission