Updated access checks to work on both methods and classes.
Added permission checks and model for editing params.