Add permissions to the models of the objects they grant permissions for.

Signed-off-by: Tyler O'Meara <Tyler@TylerOMeara.com>
don't think this is supposed to contain `.{app_short}` :)