REST for permissions and role.