add page permission control
add post ejs