json interface
add permission
fixed api issue