Proper use of filters on the permissions controller.