update permission
add menu permission