after connecting model.permission to shiro.permission