Revision REST permissions