ChaWIP nge derived permissions for global model records to have a :level of 'global'