Other way around, only control on POST and PUT