A wildcard permission validate tool inspired by apache shiro