[Upg] permission : findAll() method