DefaultController access control filter