diff --git a/cloud-common/cloud-common-gateway/src/main/java/cn/sh/stc/sict/cloud/common/gateway/config/GlobalCorsConfig.java b/cloud-common/cloud-common-gateway/src/main/java/cn/sh/stc/sict/cloud/common/gateway/config/GlobalCorsConfig.java
index b8b14a6eeb9509c744f75007f16fa7cc46291c5c..c337e293fa60b9db6891b98074fb853b74fcb478 100644
--- a/cloud-common/cloud-common-gateway/src/main/java/cn/sh/stc/sict/cloud/common/gateway/config/GlobalCorsConfig.java
+++ b/cloud-common/cloud-common-gateway/src/main/java/cn/sh/stc/sict/cloud/common/gateway/config/GlobalCorsConfig.java
@@ -36,6 +36,9 @@ public class GlobalCorsConfig {
         add("http://127.0.0.1:12998");
         add("http://sict-gateway:12998");
         add("http://192.168.31.140:12998");
+        add("http://localhost:12999");
+        add("http://127.0.0.1:12999");
+        add("http://sict-gateway:12999");
     }};
     private static final String ALLOWED_Expose = "*";
     private static final String MAX_AGE = "18000L";
diff --git a/smart-health-modules/cloud-upms/cloud-upms-biz/src/main/java/cn/sh/stc/sict/cloud/upms/controller/web/HpMenuController.java b/smart-health-modules/cloud-upms/cloud-upms-biz/src/main/java/cn/sh/stc/sict/cloud/upms/controller/web/HpMenuController.java
index da1564afbee1841d8549fb74f042dfeef292d910..f4e96a4d235187d7000230a31b01a9dafe056fd8 100644
--- a/smart-health-modules/cloud-upms/cloud-upms-biz/src/main/java/cn/sh/stc/sict/cloud/upms/controller/web/HpMenuController.java
+++ b/smart-health-modules/cloud-upms/cloud-upms-biz/src/main/java/cn/sh/stc/sict/cloud/upms/controller/web/HpMenuController.java
@@ -41,6 +41,7 @@ public class HpMenuController {
      */
     @ApiOperation("分页查询 系统菜单表")
     @GetMapping("/page")
+    @PreAuthorize("@pms.hasPermission('ROLE_admin')")
     public R getHpMenuPage(Page page, HpMenu hpMenu) {
         return new R<>(hpMenuService.page(page, Wrappers.query(hpMenu)));
     }
diff --git a/smart-health-modules/cloud-upms/cloud-upms-biz/src/main/java/cn/sh/stc/sict/cloud/upms/controller/web/HpRoleController.java b/smart-health-modules/cloud-upms/cloud-upms-biz/src/main/java/cn/sh/stc/sict/cloud/upms/controller/web/HpRoleController.java
index 7b9fbb9aba21452e98a9c74ca760e74a198a8fb4..bda0d26848d19a26adf636adf808002632c37649 100644
--- a/smart-health-modules/cloud-upms/cloud-upms-biz/src/main/java/cn/sh/stc/sict/cloud/upms/controller/web/HpRoleController.java
+++ b/smart-health-modules/cloud-upms/cloud-upms-biz/src/main/java/cn/sh/stc/sict/cloud/upms/controller/web/HpRoleController.java
@@ -49,6 +49,7 @@ public class HpRoleController {
      */
     @ApiOperation("分页查询 系统角色表")
     @GetMapping("/page")
+    @PreAuthorize("@pms.hasPermission('ROLE_admin')")
     public R getHpRolePage(Page page, HpRole hpRole) {
         return new R<>(hpRoleService.page(page, Wrappers.query(hpRole)));
     }
diff --git a/smart-health-modules/cloud-upms/cloud-upms-biz/src/main/java/cn/sh/stc/sict/cloud/upms/controller/web/SysUserBaseController.java b/smart-health-modules/cloud-upms/cloud-upms-biz/src/main/java/cn/sh/stc/sict/cloud/upms/controller/web/SysUserBaseController.java
index d1fef38ec6201210ad7bc1d557c6ffac37eda64f..38141fbecd083928ccd3acf9114902a2dac4193c 100644
--- a/smart-health-modules/cloud-upms/cloud-upms-biz/src/main/java/cn/sh/stc/sict/cloud/upms/controller/web/SysUserBaseController.java
+++ b/smart-health-modules/cloud-upms/cloud-upms-biz/src/main/java/cn/sh/stc/sict/cloud/upms/controller/web/SysUserBaseController.java
@@ -60,6 +60,7 @@ public class SysUserBaseController {
 
     @ApiOperation("分页查询 系统基础用户表")
     @GetMapping("/page")
+    @PreAuthorize("@pms.hasPermission('ROLE_admin')")
     public R getSysUserBasePage(Page page, SysUserBase sysUserBase) {
         return new R<>(sysUserBaseService.page(page, Wrappers.query(sysUserBase)));
     }