This recent PR (#38) confirms that the provided solution to convert PUT methods to PATCH methods (as described here balderdashy/sails#2006 (comment)) is not generic enough.
It is impossible to set policies on a automatic route since we lose the origin of the request.