OPTIONS on resource without permissions
There is no restriction on the OPTIONS method, which might create a permission issue if one sends an OPTIONS request on a resource they shouldn't see.
There is no restriction on the OPTIONS method, which might create a permission issue if one sends an OPTIONS request on a resource they shouldn't see.