Permission logic for models that include StrongParamter