权限标签获取session,调用checkPermission方法判断