[46892367] add filter and permission checker for controllers