bug fix all permit rbac