more permissions changes for models