fixes ZEN-15814

Fix permissions on Controller and view