PLINK-286 add JPA annotations for permissions