As you can see, I use the HTTP `method` and the `action` in the same location here. Shall we define different resource names for those? This was basically because I was unable to limit certain interactions with my rest controllers otherwise...