private Set roles = new HashSet(); private List permissions = new ArrayList();