Add object level permissions for creation operations
Remove first attempt at RW access for old api/v1

Since it looks we're going forward with Rest Framework, the v1 api will
remain read-only and this is won't be needed
Fix pep8 formatting errors