Start modifying controllers to use new permissions