Create a new permission called IsInWhiteListOrReadOnly to avoid unexpected operation

Create a new permission called IsInWhiteListOrReadOnly to avoid unexpected operation