Closes #39 (Add Permission model REST API)

Closes #39 (Add Permission model REST API)