User Model & permissibility