Delegating checking of read-rights to controller, when processing internal requests