You can make a PATCH call ( any method for that matter ). Here is an example of a POST call where you pass the method as a String.
I had the same problem. It was solved by creating a permission sets, including in it permissions of all the fields used in the web services. Then this permission sets were assigned to the users that the web services did not work for.