Correct permissions on Controller and View