CWEType add_permission CWGroup