permitted schedule_id in controller