Add subquery to the objects all in model permission
Password encrypted by SHA-256