adding the ability to provide per-model action permissions (Closes #88)