I want to point something, I don\u2019t think another permission model should be designed for superset, the current FAB model is good enough with missing only one essential part - resource type indication. that missing part should be added to the current model like \u201calter table\u201d let\u2019s call it \u201calter model\u201d**.\nView is resource, API endpoint is resource too and kind of object as data is resource too (This is REST by definition).\nWhen we understand it, we can move on to the next question how to design so that security mechanizem will be used for any kind of resource.