optimized the createPermissions, now all the non-system entities are automatically read or writable for the read or write group