Add permissions controller