I would combine the answers by Mika and Albert. It should be a class where you can add and remove privileges, but behind the facade (
http://en.wikipedia.org/wiki/Facade_pattern[
^]), the bit set is one of the best way to implement the notion of the set of permission. If by some reason extended requirements will fail this implementation, it will be easy to re-implement not changing the class's interface.
—SA