Allocation-client subpage

[DO NOT MERGE] only for review
why not `service_permission`?