update controller entry point (permissions)