add change password, no-permission, change  homepage