Whitelisting of controller methods