added permissions to params
alll basic functons - model&feature spec tomorrow