Rethink controllers & scopes
Try to seperate scoping into helper methods so we can later support ACLs easier.