add  er/permission.js test