[json deserializer] now the json deserializer sets read only poro attributes