Small gap on attributes/permissions, the web service should have a "replace" operation to send attributes.

An input should be attributeType to consider. Another possibility is an array of attributeDefs to consider in the replace.

This is only for the non-lite WS...