[server] core::package::permission