add support for fine-grained field permissions for user model