Check permissions on every controller