Allow :permissions as array value
Allow nested attributes fields