Check authz on PUT requirement