# 2023-06-18
change permission check to a single function:checkUserPermission for auth_api.py
# 2023-06-22
fix bug for getPostData to support post data in request.query