I am building a Javascript Web application with a Domino back end, using the Domino DDS REST api to do POST, PUT, and GET operations against the database.  I want to use Authors and Readers fields in documents to control which users can see which documents and to give users with Author access in the ACL  the ability to edit documents they have created.  When doing a POST of a new document (implemented by the save() method of a new Backbone model) is there a way to designate one or more fields as Readers or Authors? 
Doing a GET on an existing document returns a JSON object with an attribute named '@authors' containing the names and roles in the Authors fields.  Is this attribute read/write?
Can I populate @authors with the desired values before doing a POST to have these values control author access?
My colleague says the Domino REST api makes no provision for setting Authors and Readers fields, and that this functionality can only be done through Java servlets.  Is this right?