Permission on Models and Collection even on "no self-service" user

I would like to create a model where users can still built questions from a MODEL saved within a COLLECTION that they can access, but I want them to still be a "no self-service" on all of my tables.

Is that possible? if not, is it going to be possible in future developments?