Fix permissions model for logged out user