Include Allow header for 405s

[OddBloke]

The method specified in the Request-Line is not allowed for the resource identified by the Request-URI. The response MUST include an Allow header containing a list of valid methods for the requested resource.
[http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.4.6]

[ondrowan]

This is already implemented.

[bohde]

There are two places this doesn't happen:

• https://github.com/toastdriven/django-tastypie/blob/c09154fc04964152cc029ec1010e291993fcce46/tastypie/resources.py#L1362
• https://github.com/toastdriven/django-tastypie/blob/c09154fc04964152cc029ec1010e291993fcce46/tastypie/resources.py#L1392

I'm not quite sure what to do in those cases. I don't think 405 is the appropriate code, since it's based upon the content.

[ondrowan]

Why is there check for put and delete anyway? It seems to be inconsistent as:

• there is missing check for post
• there are no additional checks in patch_detail
• there has been already check if patch is allowed, so why additional put / delete checks?

Or am I missing anything?

[bohde]

patch_list is a bulk operation for multiple put_detail, and delete_detail. Because patch_list can be allowed while disallowing one of either, put_detail or delete_detail need to be verified.