Add permissions to the models of the objects they grant permissions for.

Signed-off-by: Tyler O'Meara <Tyler@TylerOMeara.com>
instead of replace, you should be able to say `.format(account_id=str(self.id))`, right? (Not that it makes a huge difference here.