background check model and permissions