Added access control to all models that need it