feat privilege

- [x] assign permissions to roles
- [ ] edit user role
- [ ] edit user permissions
- [ ] hide/disable func based on user permissions