modified controllers for basic permissions