fixed three bugs: 1)audit status didn't change after committing to audit 2)disable to delete non-making resource 3.distiguish client and server end user