added permission control

Signed-off-by: Gerald <gera2ld@163.com>