set user/group permissions for JBoss based on attributes