handle allowed controllers