old permission system removed from controller template