fixing permissions and cards for player/card models