Add PUT and PATCH on models/{modelname}/acls endpoint.

We shouldn't name these "rights" but "permissions" to keep consistent.