参考http://www.cnblogs.com/jianyus/p/3272692.html
最小权限http://www.cnblogs.com/awpatp/archive/2011/08/16/2140648.html
