Add permissions to the models of the objects they grant permissions for.

Signed-off-by: Tyler O'Meara <Tyler@TylerOMeara.com>
style comment which applies throughout: usually I'd expect things starting with "get" to be functions. As a property I'd just name this `view_perm`