[75214236] User can see details of a subscription

* Fix security issue on subscriptions controller
* Fix subscriptions controller specs