Revert "Revert "url:加了权限判断""

This reverts commit ef13e0e3384b3c070915176caa13c094f2674eba.
head