feat: use portal_state to get navigation root url
feat: add permission
feat: add form in iframe