fixed authz#role#checkPermission