Restrict access to controller.