add forbid access knowledge and resource permission