User-Restricted Resource Access bypassed if HTTP method
in `public_methods` or `public_item_methods`.