select coalesce(max(permission),0) as permission from usr_role ur join acl on acl.role_id=ur.role_id where ur.usr_id= and acl.obj in ()