fix resource controller param permit/require