[PATCH 1/3] User model is now a PermissionedObject