[SD-1092] Added privileges for the endpoint.

Can we modify `privileges` to be `privileges = {'POST': ['archive.spike'], 'DELETE': ['archive.unspike']}`?