diff --git a/administrator/components/com_config/Model/ApplicationModel.php b/administrator/components/com_config/Model/ApplicationModel.php
index 60e1e2cb96538..5f282ffc5ca63 100644
--- a/administrator/components/com_config/Model/ApplicationModel.php
+++ b/administrator/components/com_config/Model/ApplicationModel.php
@@ -520,11 +520,11 @@ public function storePermissions($permission = null)
 		{
 			// Get data from input.
 			$permission = array(
-				'component' => $app->input->get('comp'),
-				'action'    => $app->input->get('action'),
-				'rule'      => $app->input->get('rule'),
-				'value'     => $app->input->get('value'),
-				'title'     => $app->input->get('title', '', 'RAW')
+				'component' => $app->input->Json->get('comp'),
+				'action'    => $app->input->Json->get('action'),
+				'rule'      => $app->input->Json->get('rule'),
+				'value'     => $app->input->Json->get('value'),
+				'title'     => $app->input->Json->get('title', '', 'RAW')
 			);
 		}
 
diff --git a/libraries/src/Form/Field/RulesField.php b/libraries/src/Form/Field/RulesField.php
index a284c414de111..b362eb9449083 100644
--- a/libraries/src/Form/Field/RulesField.php
+++ b/libraries/src/Form/Field/RulesField.php
@@ -309,8 +309,9 @@ protected function getInput()
 				$html[] = '</td>';
 
 				$html[] = '<td headers="settings-th' . $group->value . '">';
+				$html[] = '<div class="d-flex align-items-center">';
 
-				$html[] = '<select onchange="sendPermissions.call(this, event)" data-chosen="true" class="custom-select novalidate"'
+				$html[] = '<select onchange="Joomla.sendPermissions.call(this, event)" class="custom-select mr-1 novalidate"'
 					. ' name="' . $this->name . '[' . $action->name . '][' . $group->value . ']"'
 					. ' id="' . $this->id . '_' . $action->name	. '_' . $group->value . '"'
 					. ' title="' . strip_tags(\JText::sprintf('JLIB_RULES_SELECT_ALLOW_DENY_GROUP', \JText::_($action->title), trim($group->text))) . '">';
@@ -338,6 +339,7 @@ protected function getInput()
 				$html[] = '</select>&#160; ';
 
 				$html[] = '<span id="icon_' . $this->id . '_' . $action->name . '_' . $group->value . '"' . '></span>';
+				$html[] = '</div>';
 				$html[] = '</td>';
 
 				// Build the Calculated Settings column.
@@ -354,7 +356,7 @@ protected function getInput()
 				if ($isSuperUserGroup)
 				{
 					$result['class'] = 'badge badge-success';
-					$result['text'] = '<span class="icon-lock icon-white"></span>' . \JText::_('JLIB_RULES_ALLOWED_ADMIN');
+					$result['text'] = '<span class="fa fa-lock icon-white" aria-hidden="true"></span>' . \JText::_('JLIB_RULES_ALLOWED_ADMIN');
 				}
 				// Not super user.
 				else
@@ -412,7 +414,7 @@ protected function getInput()
 					elseif ($inheritedGroupParentAssetRule === false || $inheritedParentGroupRule === false)
 					{
 						$result['class'] = 'badge badge-danger';
-						$result['text']  = '<span class="icon-lock icon-white"></span>' . \JText::_('JLIB_RULES_NOT_ALLOWED_LOCKED');
+						$result['text']  = '<span class="fa fa-lock icon-white" aria-hidden="true"></span>' . \JText::_('JLIB_RULES_NOT_ALLOWED_LOCKED');
 					}
 				}
 
diff --git a/media/system/js/fields/permissions.js b/media/system/js/fields/permissions.js
index 65a40877e905a..d8767b19c70c3 100644
--- a/media/system/js/fields/permissions.js
+++ b/media/system/js/fields/permissions.js
@@ -1,138 +1,137 @@
 /**
- * @package         Joomla.JavaScript
- * @copyright       Copyright (C) 2005 - 2017 Open Source Matters, Inc. All rights reserved.
- * @license         GNU General Public License version 2 or later; see LICENSE.txt
+ * @copyright  Copyright (C) 2005 - 2017 Open Source Matters, Inc. All rights reserved.
+ * @license    GNU General Public License version 2 or later; see LICENSE.txt
  */
 
-/**
- * Function to send Permissions via Ajax to Com-Config Application Controller
- */
-function sendPermissions(event) {
-	// set the icon while storing the values
-	var icon = document.getElementById('icon_' + this.id);
-	icon.removeAttribute('class');
-	icon.setAttribute('class', 'fa fa-spinner fa-spin');
-
-	//get values and prepare GET-Parameter
-	var asset     = 'not',
-	    component = getUrlParam('component'),
-	    extension = getUrlParam('extension'),
-	    option    = getUrlParam('option'),
-	    view      = getUrlParam('view'),
-	    title     = component,
-	    value     = this.value,
-	    context   = '';
-
-	if (document.getElementById('jform_context')){
-		context = document.getElementById('jform_context').value;
-		context = context.split('.')[0];
-	}
+Joomla = window.Joomla || {};
+
+(function(Joomla, document) {
+	'use strict';
+
+	/**
+	 * Function to send Permissions via Ajax to Com-Config Application Controller
+	 */
+	Joomla.sendPermissions = function(event) {
+		var target = event.target;
+		// Set the icon while storing the values
+		var icon = document.getElementById('icon_' + this.id);
+		icon.removeAttribute('class');
+		icon.setAttribute('class', 'fa fa-spinner fa-spin');
+
+		// Get values and prepare GET-Parameter
+		var asset     = 'not',
+		    component = Joomla.getUrlParam('component'),
+		    extension = Joomla.getUrlParam('extension'),
+		    option    = Joomla.getUrlParam('option'),
+		    view      = Joomla.getUrlParam('view'),
+		    title     = component,
+		    value     = this.value,
+		    context   = '';
+
+		if (document.getElementById('jform_context')) {
+			context = document.getElementById('jform_context').value;
+			context = context.split('.')[0];
+		}
 
-	if (option == 'com_config' && component == false && extension == false) {
-		asset = 'root.1';
-	}
-	else if (extension == false && view == 'component'){
-		asset = component;
-	}
-	else if (context){
-		if (view == 'group') {
-			asset = context + '.fieldgroup.' + getUrlParam('id');
+		if (option == 'com_config' && component == false && extension == false) {
+			asset = 'root.1';
 		}
-		else {
-			asset = context + '.field.' + getUrlParam('id');
+		else if (extension == false && view == 'component') {
+			asset = component;
 		}
-		title = document.getElementById('jform_title').value;
-	}
-	else if (extension != false && view != false){
-		asset = extension + '.' + view + '.' + getUrlParam('id');
-		title = document.getElementById('jform_title').value;
-	}
-	else if (extension == false && view != false){
-		asset = option + '.' + view + '.' + getUrlParam('id');
-		title = document.getElementById('jform_title').value;
-	}
-
-	var id                  = this.id.replace('jform_rules_', ''),
-	    lastUnderscoreIndex = id.lastIndexOf('_');
-
-	var permission_data = {
-		comp   : asset,
-		action : id.substring(0, lastUnderscoreIndex),
-		rule   : id.substring(lastUnderscoreIndex + 1),
-		value  : value,
-		title  : title
-	};
-
-	// Remove js messages, if they exist.
-	Joomla.removeMessages();
-
-	// doing ajax request
-	jQuery.ajax({
-		method: 'POST',
-		url: document.getElementById('permissions-sliders').getAttribute('data-ajaxuri'),
-		data: permission_data,
-		datatype: 'json'
-	})
-	.fail(function (jqXHR, textStatus, error) {
-		// Remove the spinning icon.
-		icon.removeAttribute('style');
-
-		Joomla.renderMessages(Joomla.ajaxErrorsMessages(jqXHR, textStatus, error));
-
-		window.scrollTo(0, 0);
-
-		icon.setAttribute('class', 'fa fa-times');
-	})
-	.done(function (response) {
-		// Remove the spinning icon.
-		icon.removeAttribute('style');
-
-		if (response.data)
-		{
-			// Check if everything is OK
-			if (response.data.result == true)
-			{
-				icon.setAttribute('class', 'fa fa-check');
-
-				jQuery(event.target).parents().next('td').find('span')
-					.removeClass()
-					.addClass(response['data']['class'])
-					.html(response.data.text);
+		else if (context) {
+			if (view == 'group') {
+				asset = context + '.fieldgroup.' + Joomla.getUrlParam('id');
+			}
+			else {
+				asset = context + '.field.' + Joomla.getUrlParam('id');
 			}
+			title = document.getElementById('jform_title').value;
+		}
+		else if (extension != false && view != false) {
+			asset = extension + '.' + view + '.' + Joomla.getUrlParam('id');
+			title = document.getElementById('jform_title').value;
+		}
+		else if (extension == false && view != false) {
+			asset = option + '.' + view + '.' + Joomla.getUrlParam('id');
+			title = document.getElementById('jform_title').value;
 		}
 
-		// Render messages, if any. There are only message in case of errors.
-		if (typeof response.messages == 'object' && response.messages !== null)
-		{
-			Joomla.renderMessages(response.messages);
+		var id                  = this.id.replace('jform_rules_', ''),
+		    lastUnderscoreIndex = id.lastIndexOf('_');
+
+		var permissionData = {
+			comp   : asset,
+			action : id.substring(0, lastUnderscoreIndex),
+			rule   : id.substring(lastUnderscoreIndex + 1),
+			value  : value,
+			title  : title
+		};
+
+		// Remove JS messages, if they exist.
+		Joomla.removeMessages();
+
+		// Ajax request
+		Joomla.request({
+			url:    document.getElementById('permissions-sliders').getAttribute('data-ajaxuri'),
+			method: 'POST',
+			data:    JSON.stringify(permissionData),
+			perform: true,
+			headers: {'Content-Type': 'application/json'},
+			onSuccess: function(response, xhr) {
+				try {
+					response = JSON.parse(response);
+				} catch(e) {
+					console.log(e)
+				}
+
+				icon.removeAttribute('class');
+
+				// Check if everything is OK
+				if (response.data && response.data.result === true) {
+					icon.setAttribute('class', 'fa fa-check');
+
+					var badgeSpan = target.parentNode.parentNode.nextElementSibling.querySelector('span');
+					badgeSpan.removeAttribute('class');
+					badgeSpan.setAttribute('class', response.data['class']);
+					badgeSpan.innerHTML = response.data.text;
+				}
+
+				// Render messages, if any. There are only message in case of errors.
+				if (typeof response.messages === 'object' && response.messages !== null) {
+					Joomla.renderMessages(response.messages);
+
+					if (response.data && response.data.result === true) {
+						icon.setAttribute('class', 'fa fa-check');
+					} else {
+						icon.setAttribute('class', 'fa fa-times');
+					}
+				}
+			},
+			onError: function(xhr) {
+				// Remove the spinning icon.
+				icon.removeAttribute('style');
+
+				Joomla.renderMessages(Joomla.ajaxErrorsMessages(jqXHR, textStatus, error));
 
-			if (response.data && response.data.result == true)
-			{
-				icon.setAttribute('class', 'fa fa-check');
-			}
-			else
-			{
 				icon.setAttribute('class', 'fa fa-times');
 			}
+		});
+	}
 
-			window.scrollTo(0, 0);
-		}
-	});
-}
-
-/**
- * Function to get parameters out of the url
- */
-function getUrlParam(variable) {
-	var query = window.location.search.substring(1);
-	var vars = query.split('&');
-	for (var i=0;i<vars.length;i++)
-	{
-		var pair = vars[i].split('=');
-		if (pair[0] == variable)
-		{
-			return pair[1];
+	/**
+	 * Function to get parameters out of the URL
+	 */
+	Joomla.getUrlParam = function(variable) {
+		var query = window.location.search.substring(1);
+		var vars = query.split('&');
+		for (var i = 0; i < vars.length; i++) {
+			var pair = vars[i].split('=');
+			if (pair[0] == variable) {
+				return pair[1];
+			}
 		}
+		return false;
 	}
-	return false;
-}
+
+})(Joomla, document);
diff --git a/media/system/js/fields/permissions.min.js b/media/system/js/fields/permissions.min.js
index 73e163f390cd0..7d93bbb27a32d 100644
--- a/media/system/js/fields/permissions.min.js
+++ b/media/system/js/fields/permissions.min.js
@@ -1 +1 @@
-function sendPermissions(e){var t=document.getElementById("icon_"+this.id);t.removeAttribute("class"),t.setAttribute("class","fa fa-spinner fa-spin");var a="not",s=getUrlParam("component"),r=getUrlParam("extension"),o=getUrlParam("option"),l=getUrlParam("view"),n=s,i=this.value,m="";document.getElementById("jform_context")&&(m=(m=document.getElementById("jform_context").value).split(".")[0]),"com_config"==o&&0==s&&0==r?a="root.1":0==r&&"component"==l?a=s:m?(a="group"==l?m+".fieldgroup."+getUrlParam("id"):m+".field."+getUrlParam("id"),n=document.getElementById("jform_title").value):0!=r&&0!=l?(a=r+"."+l+"."+getUrlParam("id"),n=document.getElementById("jform_title").value):0==r&&0!=l&&(a=o+"."+l+"."+getUrlParam("id"),n=document.getElementById("jform_title").value);var d=this.id.replace("jform_rules_",""),u=d.lastIndexOf("_"),c={comp:a,action:d.substring(0,u),rule:d.substring(u+1),value:i,title:n};Joomla.removeMessages(),jQuery.ajax({method:"POST",url:document.getElementById("permissions-sliders").getAttribute("data-ajaxuri"),data:c,datatype:"json"}).fail(function(e,a,s){t.removeAttribute("style"),Joomla.renderMessages(Joomla.ajaxErrorsMessages(e,a,s)),window.scrollTo(0,0),t.setAttribute("class","fa fa-times")}).done(function(a){t.removeAttribute("style"),a.data&&1==a.data.result&&(t.setAttribute("class","fa fa-check"),jQuery(e.target).parents().next("td").find("span").removeClass().addClass(a.data.class).html(a.data.text)),"object"==typeof a.messages&&null!==a.messages&&(Joomla.renderMessages(a.messages),a.data&&1==a.data.result?t.setAttribute("class","fa fa-check"):t.setAttribute("class","fa fa-times"),window.scrollTo(0,0))})}function getUrlParam(e){for(var t=window.location.search.substring(1).split("&"),a=0;a<t.length;a++){var s=t[a].split("=");if(s[0]==e)return s[1]}return!1}
\ No newline at end of file
+Joomla=window.Joomla||{},function(e,t){"use strict";e.sendPermissions=function(a){var r=a.target,s=t.getElementById("icon_"+this.id);s.removeAttribute("class"),s.setAttribute("class","fa fa-spinner fa-spin");var o="not",i=e.getUrlParam("component"),n=e.getUrlParam("extension"),l=e.getUrlParam("option"),m=e.getUrlParam("view"),u=i,c=this.value,d="";t.getElementById("jform_context")&&(d=(d=t.getElementById("jform_context").value).split(".")[0]),"com_config"==l&&0==i&&0==n?o="root.1":0==n&&"component"==m?o=i:d?(o="group"==m?d+".fieldgroup."+e.getUrlParam("id"):d+".field."+e.getUrlParam("id"),u=t.getElementById("jform_title").value):0!=n&&0!=m?(o=n+"."+m+"."+e.getUrlParam("id"),u=t.getElementById("jform_title").value):0==n&&0!=m&&(o=l+"."+m+"."+e.getUrlParam("id"),u=t.getElementById("jform_title").value);var g=this.id.replace("jform_rules_",""),f=g.lastIndexOf("_"),p={comp:o,action:g.substring(0,f),rule:g.substring(f+1),value:c,title:u};e.removeMessages(),e.request({url:t.getElementById("permissions-sliders").getAttribute("data-ajaxuri"),method:"POST",data:JSON.stringify(p),perform:!0,headers:{"Content-Type":"application/json"},onSuccess:function(t,a){try{t=JSON.parse(t)}catch(e){console.log(e)}if(s.removeAttribute("class"),t.data&&!0===t.data.result){s.setAttribute("class","fa fa-check");var o=r.parentNode.parentNode.nextElementSibling.querySelector("span");o.removeAttribute("class"),o.setAttribute("class",t.data.class),o.innerHTML=t.data.text}"object"==typeof t.messages&&null!==t.messages&&(e.renderMessages(t.messages),t.data&&!0===t.data.result?s.setAttribute("class","fa fa-check"):s.setAttribute("class","fa fa-times"))},onError:function(t){s.removeAttribute("style"),e.renderMessages(e.ajaxErrorsMessages(jqXHR,textStatus,error)),s.setAttribute("class","fa fa-times")}})},e.getUrlParam=function(e){for(var t=window.location.search.substring(1).split("&"),a=0;a<t.length;a++){var r=t[a].split("=");if(r[0]==e)return r[1]}return!1}}(Joomla,document);
\ No newline at end of file
diff --git a/tests/javascript/permissions/spec.js b/tests/javascript/permissions/spec.js
index c95c33f6a6228..67484fc47d74c 100644
--- a/tests/javascript/permissions/spec.js
+++ b/tests/javascript/permissions/spec.js
@@ -10,7 +10,7 @@
  */
 
 define(['jquery', 'testsRoot/permissions/spec-setup', 'jasmineJquery'], function ($) {
-	describe('sendPermissions', function () {
+	describe('Joomla.sendPermissions', function() {
 		beforeAll(function() {
 			jasmine.Ajax.install();
 
@@ -18,24 +18,21 @@ define(['jquery', 'testsRoot/permissions/spec-setup', 'jasmineJquery'], function
 			removeFn = Joomla.removeMessages;
 			jtxtFn = Joomla.JText._;
 			ajxerrFn = Joomla.ajaxErrorsMessages;
-			scrollFn = window.scrollTo;
 
 			Joomla.JText._ = jasmine.createSpy('_');
 			Joomla.renderMessages = jasmine.createSpy('renderMessages');
 			Joomla.removeMessages = jasmine.createSpy('removeMessages');
 			Joomla.ajaxErrorsMessages = jasmine.createSpy('ajaxErrorsMessages');
-			window.scrollTo = jasmine.createSpy('scrollTo');
 
-			sendPermissions(event);
+			Joomla.sendPermissions(event);
 		});
 
-		afterAll(function () {
+		afterAll(function() {
 			jasmine.Ajax.uninstall();
 			
 			Joomla.renderMessages = renderFn;
 			Joomla.removeMessages = removeFn;
 			Joomla.ajaxErrorsMessages = ajxerrFn;
-			window.scrollTo = scrollFn;
 			Joomla.JText._ = jtxtFn;
 		});
 
@@ -47,11 +44,11 @@ define(['jquery', 'testsRoot/permissions/spec-setup', 'jasmineJquery'], function
 			expect(Joomla.removeMessages).toHaveBeenCalled();
 		});
 
-		describe("on success with resp.data.result == 'true' & resp.messages an object", function() {
+		describe("on success with resp.data.result === true & resp.messages an object", function() {
 			var $spanContainer = $('#ajax-test');
         
 			beforeAll(function() {
-				sendPermissions(event);
+				Joomla.sendPermissions(event);
 				request = jasmine.Ajax.requests.mostRecent();
 				request.respondWith(responses.success);
 			});
@@ -75,15 +72,11 @@ define(['jquery', 'testsRoot/permissions/spec-setup', 'jasmineJquery'], function
 			it("should call Joomla.renderMessages({})", function() {
 				expect(Joomla.renderMessages).toHaveBeenCalledWith({});
 			});
-
-			it("should call window.scrollTo(0, 0)", function() {
-				expect(window.scrollTo).toHaveBeenCalledWith(0, 0);
-			});
 		});
 
-		describe("on success with resp.data.result !== 'true' & resp.messages an object", function() {
+		describe("on success with resp.data.result !== true & resp.messages an object", function() {
 			beforeAll(function() {
-				sendPermissions(event);
+				Joomla.sendPermissions(event);
 				request = jasmine.Ajax.requests.mostRecent();
 				responses.success.responseText = '{"data": {"result": false}, "messages": {}}';
 				request.respondWith(responses.success);
@@ -96,15 +89,11 @@ define(['jquery', 'testsRoot/permissions/spec-setup', 'jasmineJquery'], function
 			it("should call Joomla.renderMessages({})", function() {
 				expect(Joomla.renderMessages).toHaveBeenCalledWith({});
 			});
-
-			it("should call window.scrollTo(0, 0)", function() {
-				expect(window.scrollTo).toHaveBeenCalledWith(0, 0);
-			});
 		});
 
 		describe("on failure", function() {
 			beforeAll(function() {
-				sendPermissions(event);
+				Joomla.sendPermissions(event);
 				request = jasmine.Ajax.requests.mostRecent();
 				request.respondWith(responses.fail);
 			});
@@ -116,10 +105,6 @@ define(['jquery', 'testsRoot/permissions/spec-setup', 'jasmineJquery'], function
 			it("should call Joomla.renderMessages(undefined)", function() {
 				expect(Joomla.renderMessages).toHaveBeenCalledWith(undefined);
 			});
-
-			it("should call window.scrollTo(0, 0)", function() {
-				expect(window.scrollTo).toHaveBeenCalledWith(0, 0);
-			});
         
 			it("should set attribute class in icon to fa fa-times", function() {
 				expect($('#icon_0')).toHaveAttr('class', 'fa fa-times');