* fix account permissions
* update account model for sharing