public class AppController {
private ArrayList<User> users = new ArrayList();
private final DatabaseDAO db = new DatabaseDAO();
User user;
@PostMapping("/applicazioni")
public String saveUser(@ModelAttribute("app") @Valid SApp app, BindingResult result,Model model) {

    app.setNombre(app.getNombre()+".jsp");

    if (app.getNombre().equals("permisos.jsp")){
        getUsersProperties();
        GsonBuilder gsonbuilder = new GsonBuilder();
        Gson gson = gsonbuilder.create();
       // model.addAttribute("users", null);
        model.addAttribute("users", gson.toJson(this.users));
    }

    return "home";
}

public void getUsersProperties(){
    User user;

    String sql = "SELECTn" +
                    "   idn" +
                    "   , nombren" +
                    "   , passwordn" +
                    "   , emailn" +
                    "   , usuarios.idroln" +
                    "   , permisos_javan" +
                    "   , permisos_java_avanzadosn" +
                "   FROMn" +
                "       usuariosn" +
                "       , usuarios_rolesn" +
                "   WHEREn" +
                "       usuarios.idrol = usuarios_roles.idroln" +
                "       AND usuarios.activo = 1n"
            + "         AND ISNULL(permisos_it, '') <> ''n"
            + "         AND (n"
            + "                 nombre NOT LIKE 'operatore%'n"
            + "                 AND nombre NOT LIKE 'call%'n"
            + "                 AND nombre NOT LIKE 'negozi%'n"
            + "         )";
    try {
        PreparedStatement prepare = db.getConnection().prepareStatement(sql);
        ResultSet rs = prepare.executeQuery();
        if (rs != null){


            while (rs.next()){
                user = new User();
                user.setId(Integer.parseInt(rs.getString("id")));
                user.setIdrol(Integer.parseInt(rs.getString("idrol")));
                user.setNombre(rs.getString("nombre"));
                user.setPassword(rs.getString("password"));
                user.setEmail(rs.getString("email"));
                user.setPermisos_java(rs.getString("permisos_java"));
                user.setPermisos_java_avanzados(rs.getString("permisos_java_avanzados"));
                users.add(user);
            }
        }
    } catch (SQLException ex) {
        System.err.println(ex);
    }

}

<script type="text/javascript">
var users = <%=request.getAttribute("users")%>;

$(document).ready(function(){

   $.each(users, function(key, value){
       permisos = "";
       if (value.permisos_java != null){
           permisos = "data-permisos="+value.permisos_java;
       }
       $tr = $("<tr style='cursor:pointer' data-index='"+key+"' data-id='"+value.id+"' data-nombre='"+value.nombre+"' "+permisos+">");
       $td = $("<td align='center'>"+value.id+"</td>");
       $_td = $("<td align='center'>"+value.nombre+"</td>");
       $tr.append($td).append($_td);
       $("#table-permisos tbody").append($tr);
   });