Our `rest_method_wrapper` handles checking permissions. In cases where we need to do extra permission checks beyond the norm, or where we need to filter a query based on what kind of permission is being used, we call `self._get_permission`. With the PUT method, the permissions checking in `rest_method_wrapper` does everything we need at the moment. Again, it's possible that I've overlooked something that a test suite would catch for us.