rework the function of assigning authority to role,and add url authority.