do not allow put, delete, post for derived object lists