add hide to Operation and execute for controller authority //done