refactored base_permission's permit_params! method