Fix permission for attribute model