Defined Permission model and spec helpers without restricting scope yet