diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index e3c0fbf6..a77cf2d1 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -4,6 +4,7 @@ on:
   push:
     branches:
       - main
+      - release/*
       - dev
 
 jobs:
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index ae25ff4b..cd6864e8 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -4,6 +4,7 @@ on:
   push:
     branches:
       - main
+      - release/*
       - dev
       - develop/*
   pull_request:
diff --git a/package-lock.json b/package-lock.json
index 93ff8b6d..515bd19d 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,15 +1,15 @@
 {
   "name": "scriptcat",
-  "version": "0.16.0",
+  "version": "0.15.1",
   "lockfileVersion": 2,
   "requires": true,
   "packages": {
     "": {
       "name": "scriptcat",
-      "version": "0.16.0",
+      "version": "0.15.1",
       "license": "GPLv3",
       "dependencies": {
-        "@arco-design/web-react": "^2.47.0",
+        "@arco-design/web-react": "^2.51.1",
         "@dnd-kit/core": "^6.0.5",
         "@dnd-kit/sortable": "^7.0.1",
         "@dnd-kit/utilities": "^3.2.0",
@@ -181,9 +181,9 @@
       }
     },
     "node_modules/@arco-design/web-react": {
-      "version": "2.49.0",
-      "resolved": "https://registry.npmjs.org/@arco-design/web-react/-/web-react-2.49.0.tgz",
-      "integrity": "sha512-g+B8d8am2inpMd3zGoWZ8TNDBDFZO2AiTzZurN+2q69bzpbsbiX41BG8ujV4GQPJSAt/GVGini0Hv8+LzQdmtw==",
+      "version": "2.52.0",
+      "resolved": "https://registry.npmjs.org/@arco-design/web-react/-/web-react-2.52.0.tgz",
+      "integrity": "sha512-c5DkPUj6F9fTaUqwKz0mYhYcoVLbCcC9VDt/hJammc94qVk9tFsiGhISSan4nhDQVIql5oWqlmdjE7eJqBDiLQ==",
       "dependencies": {
         "@arco-design/color": "^0.4.0",
         "@babel/runtime": "^7.5.5",
@@ -17765,9 +17765,9 @@
       }
     },
     "@arco-design/web-react": {
-      "version": "2.49.0",
-      "resolved": "https://registry.npmjs.org/@arco-design/web-react/-/web-react-2.49.0.tgz",
-      "integrity": "sha512-g+B8d8am2inpMd3zGoWZ8TNDBDFZO2AiTzZurN+2q69bzpbsbiX41BG8ujV4GQPJSAt/GVGini0Hv8+LzQdmtw==",
+      "version": "2.52.0",
+      "resolved": "https://registry.npmjs.org/@arco-design/web-react/-/web-react-2.52.0.tgz",
+      "integrity": "sha512-c5DkPUj6F9fTaUqwKz0mYhYcoVLbCcC9VDt/hJammc94qVk9tFsiGhISSan4nhDQVIql5oWqlmdjE7eJqBDiLQ==",
       "requires": {
         "@arco-design/color": "^0.4.0",
         "@babel/runtime": "^7.5.5",
diff --git a/package.json b/package.json
index 19f2a5d4..9182ff84 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "scriptcat",
-  "version": "0.16.0",
+  "version": "0.15.1",
   "description": "脚本猫,一个可以执行用户脚本的浏览器扩展,万物皆可脚本化,让你的浏览器可以做更多的事情!",
   "author": "CodFrm",
   "license": "GPLv3",
@@ -16,7 +16,7 @@
     "changlog": "gitmoji-changelog"
   },
   "dependencies": {
-    "@arco-design/web-react": "^2.47.0",
+    "@arco-design/web-react": "^2.51.1",
     "@dnd-kit/core": "^6.0.5",
     "@dnd-kit/sortable": "^7.0.1",
     "@dnd-kit/utilities": "^3.2.0",
diff --git a/src/app/service/permission/controller.ts b/src/app/service/permission/controller.ts
index 2c3cbb0c..cdc8a348 100644
--- a/src/app/service/permission/controller.ts
+++ b/src/app/service/permission/controller.ts
@@ -45,4 +45,12 @@ export default class PermissionController {
       confirm,
     });
   }
+
+  // 添加权限
+  addPermission(scriptId: number, permission: Permission) {
+    return this.msg.syncSend("addPermission", {
+      scriptId,
+      permission,
+    });
+  }
 }
diff --git a/src/locales/en-US/translation.yaml b/src/locales/en-US/translation.yaml
index 1bdb7f36..e8fe5788 100644
--- a/src/locales/en-US/translation.yaml
+++ b/src/locales/en-US/translation.yaml
@@ -198,6 +198,7 @@ script_setting: Script Setting
 basic_info: Basic Information
 update_url: Update URL
 permission_management: Permission Management
+add_permission: Add Permission
 # Script Setting Match ScriptSetting/Match
 match: Match
 user_setting: User Setting
diff --git a/src/locales/zh-CN/translation.yaml b/src/locales/zh-CN/translation.yaml
index 655d614a..6718070d 100644
--- a/src/locales/zh-CN/translation.yaml
+++ b/src/locales/zh-CN/translation.yaml
@@ -199,6 +199,9 @@ script_setting: 脚本设置
 basic_info: 基本信息
 update_url: 更新URL
 permission_management: 授权管理
+add_permission: 添加授权
+permission_cors: 跨域(cors)
+permission_cookie: 管理cookie
 # 脚本设置Match ScriptSetting/Match
 match: 匹配
 user_setting: 用户设定
diff --git a/src/manifest.json b/src/manifest.json
index e354bd9f..95f20a7f 100644
--- a/src/manifest.json
+++ b/src/manifest.json
@@ -1,7 +1,7 @@
 {
   "manifest_version": 2,
   "name": "ScriptCat",
-  "version": "0.16.0",
+  "version": "0.15.1",
   "author": "CodFrm",
   "description": "脚本猫,一个用户脚本管理器,支持后台脚本、定时脚本、页面脚本,可编写脚本每天帮你自动处理事务.",
   "options_ui": {
diff --git a/src/pages/components/ScriptSetting/Match.tsx b/src/pages/components/ScriptSetting/Match.tsx
index fcfdbc4f..4f0b0bad 100644
--- a/src/pages/components/ScriptSetting/Match.tsx
+++ b/src/pages/components/ScriptSetting/Match.tsx
@@ -289,7 +289,7 @@ const Match: React.FC<{
           </Popconfirm>
         </Space>
       </div>
-      <Table columns={columns} data={match} rowKey="id" />
+      <Table columns={columns} data={match} rowKey="id" pagination={false} />
       <Divider />
       <div className="flex flex-row justify-between pb-2">
         <Typography.Title heading={6}>{t("website_exclude")}</Typography.Title>
@@ -318,7 +318,7 @@ const Match: React.FC<{
           </Popconfirm>
         </Space>
       </div>
-      <Table columns={columns} data={exclude} rowKey="id" />
+      <Table columns={columns} data={exclude} rowKey="id" pagination={false} />
       <Divider />
     </>
   );
diff --git a/src/pages/components/ScriptSetting/Permission.tsx b/src/pages/components/ScriptSetting/Permission.tsx
new file mode 100644
index 00000000..7ea21411
--- /dev/null
+++ b/src/pages/components/ScriptSetting/Permission.tsx
@@ -0,0 +1,198 @@
+import React, { useEffect, useState } from "react";
+import { Permission } from "@App/app/repo/permission";
+import { Script } from "@App/app/repo/scripts";
+import { useTranslation } from "react-i18next";
+import IoC from "@App/app/ioc";
+import PermissionController from "@App/app/service/permission/controller";
+import {
+  Space,
+  Popconfirm,
+  Message,
+  Button,
+  Checkbox,
+  Input,
+  Modal,
+  Select,
+  Typography,
+} from "@arco-design/web-react";
+import Table, { ColumnProps } from "@arco-design/web-react/es/Table";
+import { IconDelete } from "@arco-design/web-react/icon";
+import ScriptController from "@App/app/service/script/controller";
+
+const PermissionManager: React.FC<{
+  script: Script;
+}> = ({ script }) => {
+  const permissionCtrl = IoC.instance(
+    PermissionController
+  ) as PermissionController;
+  const scriptCtrl = IoC.instance(ScriptController) as ScriptController;
+  const [permission, setPermission] = useState<Permission[]>([]);
+  const [permissionVisible, setPermissionVisible] = useState<boolean>(false);
+  const [permissionValue, setPermissionValue] = useState<Permission>();
+
+  const { t } = useTranslation();
+
+  const columns: ColumnProps[] = [
+    {
+      title: t("type"),
+      dataIndex: "permission",
+      key: "permission",
+      width: 100,
+    },
+    {
+      title: t("permission_value"),
+      dataIndex: "permissionValue",
+      key: "permissionValue",
+    },
+    {
+      title: t("allow"),
+      dataIndex: "allow",
+      key: "allow",
+      render(col) {
+        if (col) {
+          return <span style={{ color: "#52c41a" }}>{t("yes")}</span>;
+        }
+        return <span style={{ color: "#f5222d" }}>{t("no")}</span>;
+      },
+    },
+    {
+      title: t("action"),
+      render(_, item: Permission) {
+        return (
+          <Space>
+            <Popconfirm
+              title={t("confirm_delete_permission")}
+              onOk={() => {
+                permissionCtrl
+                  .deletePermission(script!.id, {
+                    permission: item.permission,
+                    permissionValue: item.permissionValue,
+                  })
+                  .then(() => {
+                    Message.success(t("delete_success")!);
+                    setPermission(permission.filter((i) => i.id !== item.id));
+                  })
+                  .catch(() => {
+                    Message.error(t("delete_failed")!);
+                  });
+              }}
+            >
+              <Button type="text" iconOnly icon={<IconDelete />} />
+            </Popconfirm>
+          </Space>
+        );
+      },
+    },
+  ];
+
+  useEffect(() => {
+    if (script) {
+      permissionCtrl.getPermissions(script.id).then((list) => {
+        setPermission(list);
+      });
+    }
+  }, [script]);
+
+  return (
+    <>
+      <Modal
+        title={t("add_permission")}
+        visible={permissionVisible}
+        onCancel={() => setPermissionVisible(false)}
+        onOk={() => {
+          if (permissionValue) {
+            permission.push({
+              id: 0,
+              scriptId: script.id,
+              permission: permissionValue.permission,
+              permissionValue: permissionValue.permissionValue,
+              allow: permissionValue.allow,
+              createtime: new Date().getTime(),
+              updatetime: 0,
+            });
+            permissionCtrl
+              .addPermission(script.id, permissionValue)
+              .then(() => {
+                setPermission([...permission]);
+                setPermissionVisible(false);
+              });
+          }
+        }}
+      >
+        <Space className="w-full" direction="vertical">
+          <Select
+            value={permissionValue?.permission}
+            onChange={(e) => {
+              permissionValue &&
+                setPermissionValue({ ...permissionValue, permission: e });
+            }}
+          >
+            <Select.Option value="cors">{t("permission_cors")}</Select.Option>
+            <Select.Option value="cookie">
+              {t("permission_cookie")}
+            </Select.Option>
+          </Select>
+          <Input
+            value={permissionValue?.permissionValue}
+            onChange={(e) => {
+              permissionValue &&
+                setPermissionValue({ ...permissionValue, permissionValue: e });
+            }}
+          />
+          <Checkbox
+            checked={permissionValue?.allow}
+            onChange={(e) => {
+              permissionValue &&
+                setPermissionValue({ ...permissionValue, allow: e });
+            }}
+          >
+            {t("allow")}
+          </Checkbox>
+        </Space>
+      </Modal>
+      <div className="flex flex-row justify-between pb-2">
+        <Typography.Title heading={6}>
+          {t("permission_management")}
+        </Typography.Title>
+        <Space>
+          <Button
+            type="primary"
+            size="small"
+            onClick={() => {
+              setPermissionValue({
+                id: Math.random(),
+                scriptId: script.id,
+                permission: "cors",
+                permissionValue: "",
+                allow: true,
+                createtime: 0,
+                updatetime: 0,
+              });
+              setPermissionVisible(true);
+            }}
+          >
+            {t("add_permission")}
+          </Button>
+          <Popconfirm
+            title={t("confirm_reset")}
+            onOk={() => {
+              scriptCtrl.resetExclude(script.id, undefined).then(() => {});
+            }}
+          >
+            <Button type="primary" size="small" status="warning">
+              {t("reset")}
+            </Button>
+          </Popconfirm>
+        </Space>
+      </div>
+      <Table
+        columns={columns}
+        data={permission}
+        rowKey="id"
+        pagination={false}
+      />
+    </>
+  );
+};
+
+export default PermissionManager;
diff --git a/src/pages/components/ScriptSetting/index.tsx b/src/pages/components/ScriptSetting/index.tsx
index 33493358..51cfabbc 100644
--- a/src/pages/components/ScriptSetting/index.tsx
+++ b/src/pages/components/ScriptSetting/index.tsx
@@ -1,104 +1,36 @@
 import IoC from "@App/app/ioc";
-import { Permission } from "@App/app/repo/permission";
 import { Script } from "@App/app/repo/scripts";
-import PermissionController from "@App/app/service/permission/controller";
 import { formatUnixTime } from "@App/pkg/utils/utils";
 import {
-  Button,
   Descriptions,
   Divider,
   Drawer,
   Empty,
   Input,
   Message,
-  Popconfirm,
-  Space,
-  Table,
-  Typography,
 } from "@arco-design/web-react";
-import { ColumnProps } from "@arco-design/web-react/es/Table";
-import { IconDelete } from "@arco-design/web-react/icon";
 import React, { useEffect, useState } from "react";
 import ScriptController from "@App/app/service/script/controller";
 import { useTranslation } from "react-i18next";
 import Match from "./Match";
+import PermissionManager from "./Permission";
 
 const ScriptSetting: React.FC<{
-  // eslint-disable-next-line react/require-default-props
-  script?: Script;
+  script: Script;
   visible: boolean;
   onOk: () => void;
   onCancel: () => void;
 }> = ({ script, visible, onCancel, onOk }) => {
-  const permissionCtrl = IoC.instance(
-    PermissionController
-  ) as PermissionController;
   const scriptCtrl = IoC.instance(ScriptController) as ScriptController;
-  const [permission, setPermission] = useState<Permission[]>([]);
   const [checkUpdateUrl, setCheckUpdateUrl] = useState<string>("");
-  const { t } = useTranslation();
 
-  const columns: ColumnProps[] = [
-    {
-      title: t("type"),
-      dataIndex: "permission",
-      key: "permission",
-      width: 100,
-    },
-    {
-      title: t("permission_value"),
-      dataIndex: "permissionValue",
-      key: "permissionValue",
-    },
-    {
-      title: t("allow"),
-      dataIndex: "allow",
-      key: "allow",
-      render(col) {
-        if (col) {
-          return <span style={{ color: "#52c41a" }}>{t("yes")}</span>;
-        }
-        return <span style={{ color: "#f5222d" }}>{t("no")}</span>;
-      },
-    },
-    {
-      title: t("action"),
-      render(_, item: Permission) {
-        return (
-          <Space>
-            <Popconfirm
-              title={t("confirm_delete_permission")}
-              onOk={() => {
-                permissionCtrl
-                  .deletePermission(script!.id, {
-                    permission: item.permission,
-                    permissionValue: item.permissionValue,
-                  })
-                  .then(() => {
-                    Message.success(t("delete_success")!);
-                    setPermission(permission.filter((i) => i.id !== item.id));
-                  })
-                  .catch(() => {
-                    Message.error(t("delete_failed")!);
-                  });
-              }}
-            >
-              <Button type="text" iconOnly icon={<IconDelete />} />
-            </Popconfirm>
-          </Space>
-        );
-      },
-    },
-  ];
+  const { t } = useTranslation();
 
   useEffect(() => {
     if (script) {
       scriptCtrl.scriptDAO.findById(script.id).then((v) => {
         setCheckUpdateUrl(v?.downloadUrl || "");
       });
-      permissionCtrl.getPermissions(script.id).then((list) => {
-        setPermission(list);
-      });
     }
   }, [script]);
 
@@ -165,10 +97,7 @@ const ScriptSetting: React.FC<{
         labelStyle={{ paddingRight: 36 }}
       />
       <Divider />
-      <Typography.Title heading={6}>
-        {t("permission_management")}
-      </Typography.Title>
-      <Table columns={columns} data={permission} rowKey="id" />
+      {script && <PermissionManager script={script} />}
       <Empty description={t("under_construction")} />
     </Drawer>
   );
diff --git a/src/pages/options/routes/script/ScriptEditor.tsx b/src/pages/options/routes/script/ScriptEditor.tsx
index 380f991e..e98504e2 100644
--- a/src/pages/options/routes/script/ScriptEditor.tsx
+++ b/src/pages/options/routes/script/ScriptEditor.tsx
@@ -539,7 +539,7 @@ function ScriptEditor() {
       />
       <ScriptSetting
         visible={visible.scriptSetting}
-        script={currentScript}
+        script={currentScript!}
         onOk={() => {
           setShow("scriptSetting", false);
         }}
diff --git a/src/runtime/background/permission_verify.ts b/src/runtime/background/permission_verify.ts
index 3f3ed1e5..a93d9d06 100644
--- a/src/runtime/background/permission_verify.ts
+++ b/src/runtime/background/permission_verify.ts
@@ -1,6 +1,6 @@
 // gm api 权限验证
 import Cache from "@App/app/cache";
-import { PermissionDAO } from "@App/app/repo/permission";
+import { Permission, PermissionDAO } from "@App/app/repo/permission";
 import { Script } from "@App/app/repo/scripts";
 import CacheKey from "@App/pkg/utils/cache_key";
 import { v4 as uuidv4 } from "uuid";
@@ -175,6 +175,35 @@ export default class PermissionVerify {
         return Promise.resolve(true);
       }
     );
+    // 监听添加权限
+    message.setHandler(
+      "addPermission",
+      async (_action, data: { scriptId: number; permission: Permission }) => {
+        // 先删除缓存
+        const cacheKey = CacheKey.permissionConfirm(
+          data.scriptId,
+          data.permission
+        );
+        await Cache.getInstance().del(cacheKey);
+        // 从数据库中查询是否有此权限
+        const m = await this.permissionDAO.findOne({
+          scriptId: data.scriptId,
+          permission: data.permission.permission,
+          permissionValue: data.permission.permissionValue || "",
+        });
+        if (!m) {
+          // 没有添加
+          await this.permissionDAO.save(data.permission);
+          return Promise.resolve(true);
+        }
+        // 有则更新
+        data.permission.id = m.id;
+        data.permission.createtime = m.createtime;
+        data.permission.updatetime = new Date().getTime();
+        this.permissionDAO.update(m.id, data.permission);
+        return Promise.resolve(true);
+      }
+    );
     this.dealConfirmQueue();
   }