fix permission class on restapi