Made controller ACL more strict