Fixed put permissions.

This fixes the permissions on the PUT method for objects. Right now, only admins can update anything.