diff --git a/features/nbi/nbi.go b/features/nbi/nbi.go
index 86721f4c..3686fe51 100644
--- a/features/nbi/nbi.go
+++ b/features/nbi/nbi.go
@@ -15,7 +15,6 @@ import (
 	"be.ems/lib/log"
 	"be.ems/lib/oauth"
 	"be.ems/lib/services"
-	"be.ems/lib/session"
 	"be.ems/restagent/config"
 )
 
@@ -35,7 +34,7 @@ type ApiResponse struct {
 	ResultMessage interface{}
 }
 
-var globalSession = session.NewSessManager("restagent")
+//var globalSession = session.NewSessManager("restagent")
 
 var (
 	MAX_RMUID_NUM   int
diff --git a/features/nbi/snmp.go b/features/nbi/snmp.go
index 9317561c..1ab4c004 100644
--- a/features/nbi/snmp.go
+++ b/features/nbi/snmp.go
@@ -54,28 +54,28 @@ func GetNRMByUri(w http.ResponseWriter, r *http.Request) {
 
 	// error processing ...
 	// 401-1 response
-	token, ret := globalSession.IsCarriedToken(r)
-	if ret == false {
-		log.Error("AccessToken is not carried")
-		services.ResponseUnauthorized401AccessTokenNotCarried(w)
-		return
-	}
+	// token, ret := globalSession.IsCarriedToken(r)
+	// if ret == false {
+	// 	log.Error("AccessToken is not carried")
+	// 	services.ResponseUnauthorized401AccessTokenNotCarried(w)
+	// 	return
+	// }
 
 	// 401-2 response
-	if globalSession.IsValidToken(token) == false {
-		log.Error("AccessToken fails or does not exist")
-		services.ResponseUnauthorized401AccessTokenNotExist(w)
-		return
-	}
+	// if globalSession.IsValidToken(token) == false {
+	// 	log.Error("AccessToken fails or does not exist")
+	// 	services.ResponseUnauthorized401AccessTokenNotExist(w)
+	// 	return
+	// }
 	// response 403 Forbidden, permissions deny
 	// todo...
-	plist := globalSession.GetPermissionFromSession(token)
-	log.Debug("permission list:", plist)
-	if len(plist) == 0 || plist[0] == false {
-		log.Error("User permission deny")
-		services.ResponseForbidden403NotPermission(w)
-		return
-	}
+	// plist := globalSession.GetPermissionFromSession(token)
+	// log.Debug("permission list:", plist)
+	// if len(plist) == 0 || plist[0] == false {
+	// 	log.Error("User permission deny")
+	// 	services.ResponseForbidden403NotPermission(w)
+	// 	return
+	// }
 
 	vars := mux.Vars(r)
 	qeuryUri := vars["apiCategory"] + "/" + vars["elementTypeValue"] + "/" + vars["objectTypeValue"]