user: give a length to PermissionBase.type