Permissions relied on 'list' in the controller, which no longer exists. Fixed.