js 没有权限

<%@page contentType="text/html; charset=GBK"%>
<%@ include file="manage/common/includes.jsp"%>
<%
String path = request.getContextPath();
String basePath = request.getScheme() + "://"
+ request.getServerName() + ":" + request.getServerPort()
+ path + "/";
%><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<base href="<%=basePath%>">
<meta http-equiv="Content-Type" content="text/html; charset=gb2312" />
<title>食品安全信用监督管理系统</title>
<link rel="stylesheet" type="text/css" href="css/cssWeb.css">
<style type="text/css">
<!--
a {
text-decoration: none;
}  /* 链接无下划线,有为underline */
a:link {
color: #325779;
}  /* 未访问的链接 */
a:visited {
color: #325779;
}  /* 已访问的链接 */
a:hover {
font-family: 宋体, Verdana;
font-size: 14px;
color: #fff;
background-color: #f93;
}a:active {
color: #24621A;
}  /* 点击激活链接 */
table.linkCss a {
text-decoration: none;
}  /* 链接无下划线,有为underline */
table.linkCss a:link {
color: #000000;
}  /* 未访问的链接 */
table.linkCss a:visited {
color: #000000;
}  /* 已访问的链接 */
table.linkCss a:hover {
font-family: 宋体, Verdana;
font-size: 12px;
color: #fff;
background-color: #5396DD;
}table.linkCss a:active {
color: #24621A;
}  /* 点击激活链接 */
.STYLE1 {
color: #003399;
font-size: 14px;
font-family: "宋体";
}.STYLE2 {
font-size: 12px;
font-family: "宋体";
color: #000000;
}.message {
font-family: "宋体";
color: #003399;
font-size: 12.6px;
}.bg {
background-image: url("images/shangbiao.png");
background-position: 50% 99%;
background-repeat: no-repeat;;
}
-->
</style>
<script language="javascript">
function track(){
  var cataId; 
   cataId = document.getElementById('cataId').value;                                                                                                                                                                                                                                                                                           
document.right.location.href ='showColumnList.htm?action=showTitie&cataId='+cataId;
alert(cataId);
}
</script>
<script type="text/javascript">
 //** iframe自动适应页面 **// //如果用户的浏览器不支持iframe是否将iframe隐藏 yes 表示隐藏，no表示不隐藏
 var iframehide="yes" function dyniframesize() 
 {
    //自动调整iframe高度
    var dyniframe = document.getElementById("right");
    if (dyniframe && !window.opera)
    {
     dyniframe.style.display="block"
     if (dyniframe.contentDocument && dyniframe.contentDocument.body.offsetHeight) //如果用户的浏览器是NetScape
      dyniframe.height = dyniframe.contentDocument.body.offsetHeight; 
     else if (dyniframe.Document && dyniframe.Document.body.scrollHeight) //如果用户的浏览器是IE
      dyniframe.height = dyniframe.Document.body.scrollHeight;
    }   //根据设定的参数来处理不支持iframe的浏览器的显示问题
   if ((document.all || document.getElementById) && iframehide=="no")
   {
    var tempobj=document.all? document.all["right"] : document.getElementById("right")
    tempobj.style.display="block"
   }
 }
 if (window.addEventListener)
 window.addEventListener("load", dyniframesize, false)
 else if (window.attachEvent)
 window.attachEvent("onload", dyniframesize)
 else
 window.onload=dyniframesize</script> </head>
<body marginheight="0" marginwidth="0" topmargin="2" leftmargin="2"
rightmargin="0">
<table width="778" bgcolor="#FFFFFF" border="0" cellpadding="0"
cellspacing="0" align="center">
<tr>
<td colspan="5"><jsp:include page="../head.jsp" /></td>
</tr>
         <td width="200" height="100" valign="top">
<table width="100%" border="0" cellpadding="0" cellspacing="0">
<tr>
<td width="100%" valign="top" bgcolor="#E0EFF8" id="leftMenu"
class="bg">
<table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
<td colspan="5" scope="col">
&nbsp;
</td>
</tr>
<tr>
<td valign="top">
<table width="100%" height="213" border="0" cellpadding="0"
cellspacing="0">
<tr>
<td width="18%" scope="col">
&nbsp;
</td>
<td class="STYLE1" scope="col">
<table width="100%"
style="word-break: break-all; word-wrap: break-word;">
<tr>
<td width="100%">
<table width="100%" border="0" cellpadding="0"
cellspacing="0">
<c:forEach items="${map}" var="cata">
<tr>
<td></td>
<td height="31" align="left">
&nbsp;&nbsp;
<img src="images/xing.png" />
<span onclick="track()" style="cursor:pointer"> <font size="2">
${cata.cataName} </font>
</span>&nbsp;&nbsp;&nbsp;
<input type="hidden" value="${cata.cataId}"
id="cataId" name="cataId" /> 
</td>
</tr>
</c:forEach>
</table>
</td>
</tr>
</table>
</td> </tr>
</table>
</td>
</tr>
</table>
</td>
<td colspan="2" align="center" valign="top">
<IFRAME scrolling="no" src="http://www.hao123.com" width="80%" name="right" id="right"
align="top" frameborder="0" onload="dyniframesize()"></IFRAME>
</td>
</tr> <tr>
<td colspan="3">
<table width="100%" height="8" border="0" cellpadding="0"
cellspacing="0" background="images/down_tiao.png">
<tr>
<td scope="col"></td>
</tr>
</table>
</td>
</tr>
<tr>
<td colspan="3" align="center" valign="bottom">
<img src="images/copyright.png" width="215" height="13" />
</td>
</tr>
</table>
</td>
<tr>
<td colspan="5"><jsp:include page="../foot.jsp" /></td>
</tr>
</table>
</body>
<script language="javascript">
  if(screen.height>768){
    document.getElementById("leftMenu").height="700";
  }
</script>
</html>