modify ACL_Trait_User to accept permission name strings