More on permissions. Some simplifications on controllers.