use allowy for all permissions in organizations controller

[#54656298]
use allowy in base model controller if it has been set up for the model

[#54656298]