TMSS-1276: return POST in Access-Control-Allow-Methods in list view if user has project permission that potentially allows that
Closes TMSS-1276