permission feature : get application list