add the verify permission of user's action