[fix] Remove extra deps
Detail, use partial rendering
Subclassing, permitting

* If user has no right to view schema of related model, the relation attribute is omitted from schema response
* API requires model to be subclass of perm model