Add model access rules

The product configuration was accessible for all users.  This has been
changed so that only users of the Product Administration group can
see the Product Configuration view and change the records in the model.