Refactors controller actions limitations, so that limit is default, and full CRUD access has to be allowed