refactor(permission): move service under namespace