Save permissions during model creation

WIP

* [x] Use validated['permissions'] in views
* [ ] Refactor validators for a better use of colander API