Fix renderItem() not using correct controller ID to check permission.