permission model and permission class added to active record base