JC: added return customer by access right to app controller. spec passes.