rspec added
permission model added