Well, basically you need the following verbs ALLOWED
There are others like OPTIONS,TRACE and CONNECT which are considered more like service verbs and should be allowed anyway.
Unfortunately I don't think there is any specific documention for security released for now.
All the best,
the Telerik team
Do you want to have your say in the Sitefinity development roadmap? Do you want to know when a feature you requested is added or when a bug fixed? Explore the Telerik Public Issue Tracking
system and vote to affect the priority of the items