Updating rest controller for new permissions