BIS2007 controller permitted params