- Got it going.
- Must have trailing slash on PUT/POST URLs (otherwise you're accessing the list method)
- Permissions need () after them