Fixed set api permission