JC: added retrieve customer by access right in app controller.