allow all SQL operations in put/post/delete handlers