Thanks Chetan.
I confirmed those three things and can POST to create CustomTableItems or GET to read CustomTableItems, but I cannot POST to create CustomModuleItems or GET to read CustomModuleItems.
I created a custom module and want to use the REST service to add new items to the database for the custom module, but I don't know how to configure the module's permissions or ensure that ObjectType can be accessed by RESTful roles.