diff --git a/service/event/handler.go b/service/event/handler.go
index 57e45e2..035d8df 100644
--- a/service/event/handler.go
+++ b/service/event/handler.go
@@ -7,6 +7,6 @@ import (
 )
 
 func Handler(r *gin.RouterGroup) {
-	r.Use(middleware.JWTAuth(true))
+	r.Use(middleware.JWTAuth(true), middleware.Permission(10))
 	r.GET("/info", Info)
 }
diff --git a/service/user/create.go b/service/user/create.go
new file mode 100644
index 0000000..4fe088e
--- /dev/null
+++ b/service/user/create.go
@@ -0,0 +1,7 @@
+package user
+
+import "github.com/gin-gonic/gin"
+
+func Create(c *gin.Context) {
+
+}
diff --git a/service/user/handler.go b/service/user/handler.go
index 9438e2a..81c5277 100644
--- a/service/user/handler.go
+++ b/service/user/handler.go
@@ -7,12 +7,13 @@ import (
 )
 
 func Handler(r *gin.RouterGroup) {
-	r.Use(middleware.JWTAuth(true), middleware.Permission(10))
+	r.Use(middleware.JWTAuth(true), middleware.Permission(5))
 	r.GET("/info", Info)
 	r.GET("/checkin", Checkin)
 	r.POST("/checkin/submit", CheckinSubmit, middleware.Permission(20))
 	r.PATCH("/update", Update)
 	r.GET("/list", List)
 	r.GET("/query", Query)
-	r.POST("/full", Full, middleware.Permission(50))
+	r.POST("/full", Full, middleware.Permission(30))
+	r.POST("/create", Create, middleware.Permission(50))
 }