[#list ["admin:goods", "admin:stock", "admin:productCategory", "admin:parameter", "admin:attribute", "admin:specification", "admin:brand", "admin:productNotify"] as permission] [@shiro.hasPermission name = permission]