updated: 权限模块从基础设施层中分离