CAL-861 return last-modified and etag header
CAL-861 allow multiple permission on each rest entry point