frame and permission to product controller