`:number` => `:id` (if that's the case) - also `/assign` probably makes sense to be "assignment".  You'd also need to protect this url in the config.default.json.