Check out permissions on controllers