[FIX] Object action could be not csrf protected => post is not a requirement for routing
Developper must handle this case