UserPermission can now be properly set with json and xml posts