Implement write API, new permission, http basic auth