Make permission fields readonly, and filter by id