#83 refactor permission module for not load items into domain container when do query