Fix access control on new portal controllers