Reviewed as requested. Applied some linting logic.
This should be a PUT, but the changes to JS are not obvious.
Accordingly, I removed the object creation logic.
Changed the permission to admin_disc.
Absent keys should not delete data, use existing data as default.