Added an ACL check for the main controller