Fix permissions in baseController