Permissions updates

when importing permission, since these are portal-scope models, the source and target resourcePK is going to be same, which is the companyId.