PdoModel: Make sure to check __allowRead after authorization