add permissible controller concern