Fixed old permission checking in RoleController