Fix permissions controller