system auth and permissions finished- finished Model also