[NEW] Web permission rules
[UPDATE] Improve web permission UI and query