DAM-318: Additional tweaks to CatalogController permissions