Validation on permission model