From 1a5fb1abccbacfa7ec1822d88a19677b4584bc15 Mon Sep 17 00:00:00 2001
From: Jeremy Grossmann <grossmj@gns3.net>
Date: Tue, 17 Aug 2021 23:47:32 +0930
Subject: [PATCH] Only use the necessary HTTP methods for default permissions

---
 gns3server/db/models/permissions.py | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/gns3server/db/models/permissions.py b/gns3server/db/models/permissions.py
index 4779b6af..8be3d669 100644
--- a/gns3server/db/models/permissions.py
+++ b/gns3server/db/models/permissions.py
@@ -53,19 +53,19 @@ def create_default_roles(target, connection, **kw):
     default_permissions = [
         {
             "description": "Allow access to all endpoints",
-            "methods": ["GET", "HEAD", "POST", "PUT", "DELETE", "PATCH"],
+            "methods": ["GET", "POST", "PUT", "DELETE"],
             "path": "/",
             "action": "ALLOW"
         },
         {
             "description": "Allow to create and list projects",
-            "methods": ["GET", "HEAD", "POST"],
+            "methods": ["GET", "POST"],
             "path": "/projects",
             "action": "ALLOW"
         },
         {
             "description": "Allow to create and list templates",
-            "methods": ["GET", "HEAD", "POST"],
+            "methods": ["GET", "POST"],
             "path": "/templates",
             "action": "ALLOW"
         },
@@ -77,7 +77,7 @@ def create_default_roles(target, connection, **kw):
         },
         {
             "description": "Allow access to all symbol endpoints",
-            "methods": ["GET", "HEAD", "POST"],
+            "methods": ["GET", "POST"],
             "path": "/symbols/*",
             "action": "ALLOW"
         },