permission management
test module with permission