site: add permission control for leader applying materials;
application: re-do permission check before applying;