Claims filter for controller groups and actions