diff --git a/gringotts-frontend/pages/index/tab-permissions.js b/gringotts-frontend/pages/index/tab-permissions.js
index 7c2017f..ffcbb51 100644
--- a/gringotts-frontend/pages/index/tab-permissions.js
+++ b/gringotts-frontend/pages/index/tab-permissions.js
@@ -32,85 +32,6 @@ export function tabPermissions() {
         body: {
             type: 'tabs',
             tabs: [
-                {
-                    visibleOn: customerOnly,
-                    title: '授权管理',
-                    body: {
-                        type: 'crud',
-                        api: {
-                            ...apiGet('${base}/authentication/list')
-                        },
-                        ...crudCommonOptions(),
-                        headerToolbar: [
-                            'reload',
-                            {
-                                type: 'action',
-                                label: '',
-                                icon: 'fa fa-plus',
-                                ...authenticationAddDialog()
-                            },
-                        ],
-                        columns: [
-                            stringField('name', '名称', 200),
-                            stringWrapField('description', '描述'),
-                            mappingField('state', '状态', permissionStateMapping),
-                            timeField('createdTime', '创建时间'),
-                            operationField('操作', undefined, [
-                                {
-                                    type: 'action',
-                                    label: '查看',
-                                    level: 'link',
-                                    ...authenticationDetailDialog(),
-                                },
-                                {
-                                    visibleOn: arrayInCheck([checkState.ownerChecking, checkState.checking], 'state'),
-                                    type: 'action',
-                                    label: '撤销',
-                                    level: 'link',
-                                    confirmTitle: '确认撤销',
-                                    confirmText: '确认撤销名称为「${name}」的授权申请吗？',
-                                    actionType: 'ajax',
-                                    api: apiGet('${base}/authentication/retract/${id}'),
-                                },
-                                {
-                                    visibleOn: arrayInCheck([checkState.draft], 'state'),
-                                    type: 'action',
-                                    label: '提交',
-                                    level: 'link',
-                                    confirmTitle: '确认提交',
-                                    confirmText: '确认提交名称为「${name}」的授权申请吗？',
-                                    actionType: 'ajax',
-                                    api: apiGet('${base}/authentication/submit/${id}'),
-                                },
-                                {
-                                    type: 'dropdown-button',
-                                    level: 'link',
-                                    icon: 'fa fa-ellipsis-h',
-                                    hideCaret: true,
-                                    trigger: 'hover',
-                                    buttons: [
-                                        {
-                                            disabledOn: arrayOutCheck([checkState.draft], 'state'),
-                                            type: 'action',
-                                            label: '编辑',
-                                            level: 'link',
-                                            ...authenticationEditeDialog(),
-                                        },
-                                        {
-                                            disabledOn: arrayInCheck([checkState.ownerChecking, checkState.checking], 'state'),
-                                            type: 'action',
-                                            label: "删除",
-                                            confirmTitle: '确认删除',
-                                            confirmText: '确认删除名称为「${name}」的确权申请吗？删除后对应的数据资源处于未确权状态。',
-                                            actionType: 'ajax',
-                                            api: apiGet('${base}/authentication/remove/${id}'),
-                                        },
-                                    ]
-                                },
-                            ]),
-                        ]
-                    }
-                },
                 {
                     visibleOn: providerOnly,
                     title: '确权管理',
@@ -190,6 +111,85 @@ export function tabPermissions() {
                         ]
                     }
                 },
+                {
+                    visibleOn: customerOnly,
+                    title: '授权管理',
+                    body: {
+                        type: 'crud',
+                        api: {
+                            ...apiGet('${base}/authentication/list')
+                        },
+                        ...crudCommonOptions(),
+                        headerToolbar: [
+                            'reload',
+                            {
+                                type: 'action',
+                                label: '',
+                                icon: 'fa fa-plus',
+                                ...authenticationAddDialog()
+                            },
+                        ],
+                        columns: [
+                            stringField('name', '名称', 200),
+                            stringWrapField('description', '描述'),
+                            mappingField('state', '状态', permissionStateMapping),
+                            timeField('createdTime', '创建时间'),
+                            operationField('操作', undefined, [
+                                {
+                                    type: 'action',
+                                    label: '查看',
+                                    level: 'link',
+                                    ...authenticationDetailDialog(),
+                                },
+                                {
+                                    visibleOn: arrayInCheck([checkState.ownerChecking, checkState.checking], 'state'),
+                                    type: 'action',
+                                    label: '撤销',
+                                    level: 'link',
+                                    confirmTitle: '确认撤销',
+                                    confirmText: '确认撤销名称为「${name}」的授权申请吗？',
+                                    actionType: 'ajax',
+                                    api: apiGet('${base}/authentication/retract/${id}'),
+                                },
+                                {
+                                    visibleOn: arrayInCheck([checkState.draft], 'state'),
+                                    type: 'action',
+                                    label: '提交',
+                                    level: 'link',
+                                    confirmTitle: '确认提交',
+                                    confirmText: '确认提交名称为「${name}」的授权申请吗？',
+                                    actionType: 'ajax',
+                                    api: apiGet('${base}/authentication/submit/${id}'),
+                                },
+                                {
+                                    type: 'dropdown-button',
+                                    level: 'link',
+                                    icon: 'fa fa-ellipsis-h',
+                                    hideCaret: true,
+                                    trigger: 'hover',
+                                    buttons: [
+                                        {
+                                            disabledOn: arrayOutCheck([checkState.draft], 'state'),
+                                            type: 'action',
+                                            label: '编辑',
+                                            level: 'link',
+                                            ...authenticationEditeDialog(),
+                                        },
+                                        {
+                                            disabledOn: arrayInCheck([checkState.ownerChecking, checkState.checking], 'state'),
+                                            type: 'action',
+                                            label: "删除",
+                                            confirmTitle: '确认删除',
+                                            confirmText: '确认删除名称为「${name}」的确权申请吗？删除后对应的数据资源处于未确权状态。',
+                                            actionType: 'ajax',
+                                            api: apiGet('${base}/authentication/remove/${id}'),
+                                        },
+                                    ]
+                                },
+                            ]),
+                        ]
+                    }
+                },
             ]
         }
     }