Append allowed

Author: bourgeoa

lib/handlers/patch.js

@@ -144,7 +144,7 @@ async function checkPermission (request, patchObject, resourceExists) {
   // we might need to perform additional checks.
   let modes = []
   // acl:default Write is required for create when resource exists
-  if (resourceExists) modes = ['Write']
+  if (!resourceExists) modes = ['Append']
   const { acl, session: { userId } } = request
   // Read access is required for DELETE and WHERE.
   // If we would allows users without read access,