Migrating State Transitions from Roles to Permissions