fix(controller): shared users can manage domains