fix a bug: when assign authority to role, it doesn't automaticlly assign module to role