Require GET permission for index copy

While some index-related requests  are expressed as `POST`, we only ask for a `GET` 
permission as the application objective is to actually read data.