added security for REST API DML like methods