check the permission controller and method