# Evaluate permission error **URL:** \ **Category:** Getting advice\ **Created:** [February 20, 2021, 1:22am UTC](https://forum.keycloak.org/t/evaluate-permission-error/7492 "2021-02-20T01:22:00Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![fonlin](https://avatars.discourse-cdn.com/v4/letter/f/b77776/32.png) [@fonlin](https://forum.keycloak.org/u/fonlin)\ **Post date:** [February 20, 2021, 1:22am UTC](https://forum.keycloak.org/t/evaluate-permission-error/7492/1 "2021-02-20T01:22:00Z")
I have some resources and permissions like this, but when i evaluate permission, I didn’t get what I expected. resource: menu1 type=menu permission1: need role(super\_admin) permission2: need role(editor) user: 004566 has role(super\_admin) and no role(editor) Now the role(super\_admin) is `PERMIT` and role(editor) is `DENY`，but the Result is `DENY` even if I set the `Decision Strategy` to `Affirmative`. This situation does not conform to the [keycloak doc](https://www.keycloak.org/docs/latest/authorization_services/#resource_server_settings) in my understanding. I think it should be `PERMIT`. WHY? ![1](https://global.discourse-cdn.com/free1/uploads/keycloak/original/2X/d/d065cc99bd6b387f6c2ee36a611afb82bfafe5e5.png) ---
**Author:** ![fonlin](https://avatars.discourse-cdn.com/v4/letter/f/b77776/32.png) [@fonlin](https://forum.keycloak.org/u/fonlin)\ **Post date:** [February 20, 2021, 1:23am UTC](https://forum.keycloak.org/t/evaluate-permission-error/7492/2 "2021-02-20T01:23:44Z")
This is the result I evaluated. ![6](https://global.discourse-cdn.com/free1/uploads/keycloak/original/2X/8/8740428aa885978b9e98e29077415814ad421aca.png) ---
**Author:** ![fonlin](https://avatars.discourse-cdn.com/v4/letter/f/b77776/32.png) [@fonlin](https://forum.keycloak.org/u/fonlin)\ **Post date:** [February 20, 2021, 7:30am UTC](https://forum.keycloak.org/t/evaluate-permission-error/7492/3 "2021-02-20T07:30:44Z")
Can someone help me?