BS-11147, add process api permission rule