Refactor per today's code review.

Remove unused partners_for_provider method.

Factor some permissions logic out into PR model.