add fn add root node
add role privilege
update privilege