update PermissionService
add core/sync API call