permission order: type, role, value
set permission on every _put
permission arguments order: TYPE, ROLE, VALUE