@Entity
public class User {

    ...

    @ManyToMany
    private Set<Permission> allowedPermissions;

    ...

}



@Entity
public class Permission {

    ...

    private boolean isDefault;

    ...

}