Which attribute should you place on the method?
Which permission class should you use?
Which code segment should you use?