Web access controls

It seems that you are using literal strings for group-based objects (e.g. PERMISSION_TEXT_VALUE_PUBLIC). Wouldn't it make more sense to use URIs?