Fixed permission checking for models that returned multiple results