[Fixed]-Rejecting some POSTs for some users

Is this a job for a custom validator or permission?

This is a validation job.

Validators do have access to the general context through their set_context method. See using set_context