Even more of use org.gatein.api.security.Permission rather than String[]
or
List<String>