fixed something and add permission page