Permission/roles are no longer normalized/database persisted. They're referenced by their string id's in stead