WFCORE-135: remove custom runtime permissions

"ControllerPermission" would be more appropriate.