Lockdown user model permissions

Yes. However, when using the updated gateway (which travis is testing now) that is done for you.