diff --git a/YiSha.Web/YiSha.Admin.Web/Areas/OrganizationManage/Controllers/DepartmentController.cs b/YiSha.Web/YiSha.Admin.Web/Areas/OrganizationManage/Controllers/DepartmentController.cs
index 950ad8cc..7a535e67 100644
--- a/YiSha.Web/YiSha.Admin.Web/Areas/OrganizationManage/Controllers/DepartmentController.cs
+++ b/YiSha.Web/YiSha.Admin.Web/Areas/OrganizationManage/Controllers/DepartmentController.cs
@@ -49,6 +49,7 @@ public async Task<IActionResult> GetDepartmentTreeListJson(DepartmentListParam p
         }
 
         [HttpGet]
+        [AuthorizeFilter("organization:department:view")]
         public async Task<IActionResult> GetUserTreeListJson(DepartmentListParam param)
         {
             TData<List<ZtreeInfo>> obj = await departmentBLL.GetZtreeUserList(param);
diff --git a/YiSha.Web/YiSha.Admin.Web/Areas/OrganizationManage/Controllers/UserController.cs b/YiSha.Web/YiSha.Admin.Web/Areas/OrganizationManage/Controllers/UserController.cs
index a8a93ecf..38c4117b 100644
--- a/YiSha.Web/YiSha.Admin.Web/Areas/OrganizationManage/Controllers/UserController.cs
+++ b/YiSha.Web/YiSha.Admin.Web/Areas/OrganizationManage/Controllers/UserController.cs
@@ -137,6 +137,7 @@ public async Task<IActionResult> ResetPasswordJson(UserEntity entity)
         }
 
         [HttpPost]
+        [AuthorizeFilter("organization:user:edit")]
         public async Task<IActionResult> ChangePasswordJson(ChangePasswordParam entity)
         {
             TData<long> obj = await userBLL.ChangePassword(entity);
@@ -144,6 +145,7 @@ public async Task<IActionResult> ChangePasswordJson(ChangePasswordParam entity)
         }
 
         [HttpPost]
+        [AuthorizeFilter("organization:user:edit")]
         public async Task<IActionResult> ChangeUserJson(UserEntity entity)
         {
             TData<long> obj = await userBLL.ChangeUser(entity);
@@ -151,6 +153,7 @@ public async Task<IActionResult> ChangeUserJson(UserEntity entity)
         }
 
         [HttpPost]
+        [AuthorizeFilter("organization:user:edit")]
         public async Task<IActionResult> ImportUserJson(ImportParam param)
         {
             List<UserEntity> list = new ExcelHelper<UserEntity>().ImportFromExcel(param.FilePath);
@@ -159,6 +162,7 @@ public async Task<IActionResult> ImportUserJson(ImportParam param)
         }
 
         [HttpPost]
+        [AuthorizeFilter("organization:user:edit")]
         public async Task<IActionResult> ExportUserJson(UserListParam param)
         {
             TData<string> obj = new TData<string>();
diff --git a/YiSha.Web/YiSha.Admin.Web/Areas/SystemManage/Controllers/AreaController.cs b/YiSha.Web/YiSha.Admin.Web/Areas/SystemManage/Controllers/AreaController.cs
index 314ac41f..af151c77 100644
--- a/YiSha.Web/YiSha.Admin.Web/Areas/SystemManage/Controllers/AreaController.cs
+++ b/YiSha.Web/YiSha.Admin.Web/Areas/SystemManage/Controllers/AreaController.cs
@@ -52,6 +52,7 @@ public async Task<IActionResult> GetPageListJson(AreaListParam param, Pagination
         }
 
         [HttpGet]
+        [AuthorizeFilter("system:area:view")]
         public async Task<IActionResult> GetZtreeAreaListJson(AreaListParam param)
         {
             TData<List<ZtreeInfo>> obj = await areaBLL.GetZtreeAreaList(param);
@@ -59,6 +60,7 @@ public async Task<IActionResult> GetZtreeAreaListJson(AreaListParam param)
         }
 
         [HttpGet]
+        [AuthorizeFilter("system:area:view")]
         public async Task<IActionResult> GetFormJson(long id)
         {
             TData<AreaEntity> obj = await areaBLL.GetEntity(id);
diff --git a/YiSha.Web/YiSha.Admin.Web/Areas/SystemManage/Controllers/AutoJobLogController.cs b/YiSha.Web/YiSha.Admin.Web/Areas/SystemManage/Controllers/AutoJobLogController.cs
index fb87b83c..2e486dc9 100644
--- a/YiSha.Web/YiSha.Admin.Web/Areas/SystemManage/Controllers/AutoJobLogController.cs
+++ b/YiSha.Web/YiSha.Admin.Web/Areas/SystemManage/Controllers/AutoJobLogController.cs
@@ -34,6 +34,7 @@ public IActionResult AutoJobLogForm()
 
         #region 获取数据
         [HttpGet]
+        [AuthorizeFilter("system:autojob:logview")]
         public async Task<IActionResult> GetListJson(AutoJobLogListParam param)
         {
             TData<List<AutoJobLogEntity>> obj = await autoJobLogBLL.GetList(param);
@@ -41,6 +42,7 @@ public async Task<IActionResult> GetListJson(AutoJobLogListParam param)
         }
 
         [HttpGet]
+        [AuthorizeFilter("system:autojob:logview")]
         public async Task<IActionResult> GetPageListJson(AutoJobLogListParam param, Pagination pagination)
         {
             TData<List<AutoJobLogEntity>> obj = await autoJobLogBLL.GetPageList(param, pagination);
@@ -48,6 +50,7 @@ public async Task<IActionResult> GetPageListJson(AutoJobLogListParam param, Pagi
         }
 
         [HttpGet]
+        [AuthorizeFilter("system:autojob:logview")]
         public async Task<IActionResult> GetFormJson(long id)
         {
             TData<AutoJobLogEntity> obj = await autoJobLogBLL.GetEntity(id);
@@ -57,6 +60,7 @@ public async Task<IActionResult> GetFormJson(long id)
 
         #region 提交数据
         [HttpPost]
+        [AuthorizeFilter("system:autojob:logview")]
         public async Task<IActionResult> SaveFormJson(AutoJobLogEntity entity)
         {
             TData<string> obj = await autoJobLogBLL.SaveForm(entity);
@@ -64,6 +68,7 @@ public async Task<IActionResult> SaveFormJson(AutoJobLogEntity entity)
         }
 
         [HttpPost]
+        [AuthorizeFilter("system:autojob:logview")]
         public async Task<IActionResult> DeleteFormJson(string ids)
         {
             TData obj = await autoJobLogBLL.DeleteForm(ids);
diff --git a/YiSha.Web/YiSha.Admin.Web/Areas/SystemManage/Controllers/DataDictController.cs b/YiSha.Web/YiSha.Admin.Web/Areas/SystemManage/Controllers/DataDictController.cs
index d5dc19cd..7dd2d71e 100644
--- a/YiSha.Web/YiSha.Admin.Web/Areas/SystemManage/Controllers/DataDictController.cs
+++ b/YiSha.Web/YiSha.Admin.Web/Areas/SystemManage/Controllers/DataDictController.cs
@@ -52,6 +52,7 @@ public async Task<IActionResult> GetPageListJson(DataDictListParam param, Pagina
         }
 
         [HttpGet]
+        [AuthorizeFilter("system:datadict:view")]
         public async Task<IActionResult> GetFormJson(long id)
         {
             TData<DataDictEntity> obj = await dataDictBLL.GetEntity(id);
@@ -66,6 +67,7 @@ public async Task<IActionResult> GetMaxSortJson()
         }
 
         [HttpGet]
+        [AuthorizeFilter("system:datadict:view")]
         public async Task<IActionResult> GetDataDictListJson()
         {
             TData<List<DataDictInfo>> obj = await dataDictBLL.GetDataDictList();
diff --git a/YiSha.Web/YiSha.Admin.Web/Areas/SystemManage/Controllers/DataDictDetailController.cs b/YiSha.Web/YiSha.Admin.Web/Areas/SystemManage/Controllers/DataDictDetailController.cs
index 473b2d79..87f63b75 100644
--- a/YiSha.Web/YiSha.Admin.Web/Areas/SystemManage/Controllers/DataDictDetailController.cs
+++ b/YiSha.Web/YiSha.Admin.Web/Areas/SystemManage/Controllers/DataDictDetailController.cs
@@ -50,6 +50,7 @@ public async Task<IActionResult> GetPageListJson(DataDictDetailListParam param,
         }
 
         [HttpGet]
+        [AuthorizeFilter("system:datadict:view")]
         public async Task<IActionResult> GetFormJson(long id)
         {
             TData<DataDictDetailEntity> obj = await dataDictDetailBLL.GetEntity(id);
diff --git a/YiSha.Web/YiSha.Admin.Web/Areas/SystemManage/Controllers/DatabaseController.cs b/YiSha.Web/YiSha.Admin.Web/Areas/SystemManage/Controllers/DatabaseController.cs
index 71bd2cf9..3427cd81 100644
--- a/YiSha.Web/YiSha.Admin.Web/Areas/SystemManage/Controllers/DatabaseController.cs
+++ b/YiSha.Web/YiSha.Admin.Web/Areas/SystemManage/Controllers/DatabaseController.cs
@@ -51,6 +51,7 @@ public async Task<IActionResult> GetTablePageListJson(string tableName, Paginati
         }
 
         [HttpGet]
+        [AuthorizeFilter("system:datatable:view")]
         public async Task<IActionResult> GetTableFieldListJson(string tableName)
         {
             TData<List<TableFieldInfo>> obj = await databaseTableBLL.GetTableFieldList(tableName);
diff --git a/YiSha.Web/YiSha.Admin.Web/Areas/SystemManage/Controllers/LogLoginController.cs b/YiSha.Web/YiSha.Admin.Web/Areas/SystemManage/Controllers/LogLoginController.cs
index 42171806..d1c761a2 100644
--- a/YiSha.Web/YiSha.Admin.Web/Areas/SystemManage/Controllers/LogLoginController.cs
+++ b/YiSha.Web/YiSha.Admin.Web/Areas/SystemManage/Controllers/LogLoginController.cs
@@ -43,6 +43,7 @@ public async Task<IActionResult> GetPageListJson(LogLoginListParam param, Pagina
         }
 
         [HttpGet]
+        [AuthorizeFilter("system:loglogin:view")]
         public async Task<IActionResult> GetFormJson(long id)
         {
             TData<LogLoginEntity> obj = await logLoginBLL.GetEntity(id);
diff --git a/YiSha.Web/YiSha.Admin.Web/Areas/SystemManage/Controllers/LogOperateController.cs b/YiSha.Web/YiSha.Admin.Web/Areas/SystemManage/Controllers/LogOperateController.cs
index 3216854c..fd4e5249 100644
--- a/YiSha.Web/YiSha.Admin.Web/Areas/SystemManage/Controllers/LogOperateController.cs
+++ b/YiSha.Web/YiSha.Admin.Web/Areas/SystemManage/Controllers/LogOperateController.cs
@@ -25,6 +25,7 @@ public IActionResult LogOperateIndex()
             return View();
         }
 
+        [AuthorizeFilter("system:logoperate:view")]
         public IActionResult LogOperateDetail()
         {
             return View();
diff --git a/YiSha.Web/YiSha.Admin.Web/Areas/SystemManage/Controllers/RoleController.cs b/YiSha.Web/YiSha.Admin.Web/Areas/SystemManage/Controllers/RoleController.cs
index e4e5dcf3..f359902c 100644
--- a/YiSha.Web/YiSha.Admin.Web/Areas/SystemManage/Controllers/RoleController.cs
+++ b/YiSha.Web/YiSha.Admin.Web/Areas/SystemManage/Controllers/RoleController.cs
@@ -22,6 +22,7 @@ public IActionResult RoleIndex()
             return View();
         }
 
+        [AuthorizeFilter("system:role:view")]
         public IActionResult RoleForm()
         {
             return View();
@@ -54,6 +55,7 @@ public async Task<IActionResult> GetFormJson(long id)
         }
 
         [HttpGet]
+        [AuthorizeFilter("system:role:view")]
         public async Task<IActionResult> GetRoleName(RoleListParam param)
         {
             TData<string> obj = new TData<string>();