diff --git a/hxhq-modules/hxhq-system/src/main/java/com/hxhq/business/controller/StudyMethodController.java b/hxhq-modules/hxhq-system/src/main/java/com/hxhq/business/controller/StudyMethodController.java
index 2261e3d..e238833 100644
--- a/hxhq-modules/hxhq-system/src/main/java/com/hxhq/business/controller/StudyMethodController.java
+++ b/hxhq-modules/hxhq-system/src/main/java/com/hxhq/business/controller/StudyMethodController.java
@@ -12,6 +12,7 @@ import com.hxhq.business.form.study.StudyMethodSearchForm;
 import com.hxhq.business.service.IStudyMethodReadService;
 import com.hxhq.business.utils.StudyMethodFileUtil;
 import com.hxhq.common.core.domain.MpBaseEntity;
+import com.hxhq.common.security.annotation.RequiresPermissions;
 import com.hxhq.common.security.utils.SecurityUtils;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.validation.annotation.Validated;
@@ -45,6 +46,7 @@ public class StudyMethodController extends BaseController {
      * 查询试验-试验方法列表
      */
     @GetMapping("/list")
+    @RequiresPermissions("business:studyMethod:list")
     public TableDataInfo list(StudyMethodSearchForm form) {
         startPage();
         List<StudyMethod> list = studyMethodService.queryList(form);
@@ -63,6 +65,7 @@ public class StudyMethodController extends BaseController {
      * 新增试验-试验方法信息
      */
     @PostMapping("/save")
+    @RequiresPermissions("business:studyMethod:upload")
     public AjaxResult save(@RequestBody @Validated StudyMethodForm form) {
         form.setQmrId(SecurityUtils.getUserId());
         studyMethodService.save(form);
@@ -70,6 +73,7 @@ public class StudyMethodController extends BaseController {
     }
 
     @PostMapping("/read")
+    @RequiresPermissions("business:studyMethod:read")
     public AjaxResult read(@RequestBody @Validated StudyMethodReadForm form) {
         form.setQmrId(SecurityUtils.getUserId());
         studyMethodService.read(form);
@@ -82,7 +86,8 @@ public class StudyMethodController extends BaseController {
         return AjaxResult.success(list);
     }
 
-    @GetMapping(value = "/test")
+    @GetMapping(value = "/download")
+    @RequiresPermissions("business:studyMethod:download")
     public AjaxResult test(Long studyMethodId) {
         StudyMethod studyMethod = studyMethodService.getById(studyMethodId);
         if(studyMethod == null) {
diff --git a/hxhq-modules/hxhq-system/src/main/java/com/hxhq/business/controller/StudyRoomController.java b/hxhq-modules/hxhq-system/src/main/java/com/hxhq/business/controller/StudyRoomController.java
index 303e4fe..f382be4 100644
--- a/hxhq-modules/hxhq-system/src/main/java/com/hxhq/business/controller/StudyRoomController.java
+++ b/hxhq-modules/hxhq-system/src/main/java/com/hxhq/business/controller/StudyRoomController.java
@@ -9,6 +9,7 @@ import com.hxhq.business.form.study.StudyRoomHistorySearchForm;
 import com.hxhq.business.form.study.StudyRoomSearchForm;
 import com.hxhq.business.service.IStudyRoomHistoryService;
 import com.hxhq.common.core.utils.StringUtils;
+import com.hxhq.common.security.annotation.RequiresPermissions;
 import com.hxhq.common.security.utils.SecurityUtils;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.stereotype.Controller;
@@ -41,6 +42,7 @@ public class StudyRoomController extends BaseController
      * 查询试验-饲养间列表
      */
     @GetMapping("/list")
+    @RequiresPermissions("business:studyRoom:list")
     public TableDataInfo list(StudyRoomSearchForm form)
     {
         startPage();
@@ -49,6 +51,7 @@ public class StudyRoomController extends BaseController
     }
 
     @GetMapping("/historyList")
+    @RequiresPermissions("business:studyRoom:ljjl")
     public TableDataInfo historyList(StudyRoomHistorySearchForm form)
     {
         startPage();
@@ -70,6 +73,7 @@ public class StudyRoomController extends BaseController
      * 新增试验-饲养间信息
      */
     @PostMapping("/save")
+    @RequiresPermissions("business:studyRoom:add")
     public AjaxResult save(@RequestBody @Validated StudyRoomForm form)
     {
         form.setQmrId(SecurityUtils.getUserId());
@@ -82,6 +86,7 @@ public class StudyRoomController extends BaseController
      * @return
      */
     @PostMapping("/update")
+    @RequiresPermissions("business:studyRoom:update")
     public AjaxResult updateLj(@RequestBody StudyRoomForm form) {
         form.setQmrId(SecurityUtils.getUserId());
         studyRoomService.updateLj(form);
@@ -93,6 +98,7 @@ public class StudyRoomController extends BaseController
      * @param form
      * @return
      */
+    @RequiresPermissions("business:studyRoom:js")
     @PostMapping("/js")
     public AjaxResult js(@RequestBody StudyRoomForm form) {
         if(StringUtils.isEmpty(form.getJssyyl())) {