fix cms_role: inherit node permission
fix: any roles inherit ss_role