PLINK-268 seems the entity mapper api won't work for permissions, let's do this differently...