fix permission in resource list
fix sql error