diff --git a/CoreCms.Net.Web.Admin/Controllers/Advert/CoreCmsAdvertPositionController.cs b/CoreCms.Net.Web.Admin/Controllers/Advert/CoreCmsAdvertPositionController.cs
index 0c0ed3a..cd11f93 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Advert/CoreCmsAdvertPositionController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Advert/CoreCmsAdvertPositionController.cs
@@ -37,7 +37,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsAdvertPositionController : Controller
     {
         private readonly ICoreCmsAdvertPositionServices _coreCmsAdvertPositionServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Advert/CoreCmsAdvertisementController.cs b/CoreCms.Net.Web.Admin/Controllers/Advert/CoreCmsAdvertisementController.cs
index 5017dd9..6bbcffc 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Advert/CoreCmsAdvertisementController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Advert/CoreCmsAdvertisementController.cs
@@ -37,7 +37,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsAdvertisementController : Controller
     {
         private readonly ICoreCmsAdvertisementServices _coreCmsAdvertisementServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Agent/CoreCmsAgentController.cs b/CoreCms.Net.Web.Admin/Controllers/Agent/CoreCmsAgentController.cs
index 815f759..86cbf84 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Agent/CoreCmsAgentController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Agent/CoreCmsAgentController.cs
@@ -39,7 +39,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsAgentController : Controller
     {
         private readonly IWebHostEnvironment _webHostEnvironment;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Agent/CoreCmsAgentGoodsController.cs b/CoreCms.Net.Web.Admin/Controllers/Agent/CoreCmsAgentGoodsController.cs
index 4cb3dc3..c397440 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Agent/CoreCmsAgentGoodsController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Agent/CoreCmsAgentGoodsController.cs
@@ -40,7 +40,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsAgentGoodsController : Controller
     {
         private readonly IWebHostEnvironment _webHostEnvironment;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Agent/CoreCmsAgentGradeController.cs b/CoreCms.Net.Web.Admin/Controllers/Agent/CoreCmsAgentGradeController.cs
index c77e763..8ca9138 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Agent/CoreCmsAgentGradeController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Agent/CoreCmsAgentGradeController.cs
@@ -39,7 +39,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsAgentGradeController : Controller
     {
         private readonly IWebHostEnvironment _webHostEnvironment;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Agent/CoreCmsAgentOrderController.cs b/CoreCms.Net.Web.Admin/Controllers/Agent/CoreCmsAgentOrderController.cs
index 46cc42b..962d907 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Agent/CoreCmsAgentOrderController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Agent/CoreCmsAgentOrderController.cs
@@ -39,7 +39,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsAgentOrderController : Controller
     {
         private readonly IWebHostEnvironment _webHostEnvironment;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Agent/CoreCmsAgentSettingController.cs b/CoreCms.Net.Web.Admin/Controllers/Agent/CoreCmsAgentSettingController.cs
index 4fe5581..ee76d17 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Agent/CoreCmsAgentSettingController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Agent/CoreCmsAgentSettingController.cs
@@ -37,7 +37,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsAgentSettingController : Controller
     {
         private readonly IWebHostEnvironment _webHostEnvironment;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Article/CoreCmsArticleController.cs b/CoreCms.Net.Web.Admin/Controllers/Article/CoreCmsArticleController.cs
index 65a0583..525c443 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Article/CoreCmsArticleController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Article/CoreCmsArticleController.cs
@@ -35,7 +35,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsArticleController : Controller
     {
         private readonly ICoreCmsArticleServices _coreCmsArticleServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Article/CoreCmsArticleTypeController.cs b/CoreCms.Net.Web.Admin/Controllers/Article/CoreCmsArticleTypeController.cs
index f344a4d..e5910dd 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Article/CoreCmsArticleTypeController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Article/CoreCmsArticleTypeController.cs
@@ -37,7 +37,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsArticleTypeController : Controller
     {
         private readonly IWebHostEnvironment _webHostEnvironment;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Com/ToolsController.cs b/CoreCms.Net.Web.Admin/Controllers/Com/ToolsController.cs
index bfd5254..1370f81 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Com/ToolsController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Com/ToolsController.cs
@@ -1445,7 +1445,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
         /// </summary>
         /// <returns></returns>
         [HttpPost]
-        [Authorize]
+        [Authorize(Permissions.Name)]
         public async Task<JsonResult> LogisticsByApi([FromBody] FMApiLogisticsByApiPost entity)
         {
             var jm = new WebApiCallBack();
diff --git a/CoreCms.Net.Web.Admin/Controllers/Distribution/CoreCmsDistributionController.cs b/CoreCms.Net.Web.Admin/Controllers/Distribution/CoreCmsDistributionController.cs
index 83eb6b6..e987bb5 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Distribution/CoreCmsDistributionController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Distribution/CoreCmsDistributionController.cs
@@ -37,7 +37,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsDistributionController : Controller
     {
         private readonly ICoreCmsDistributionServices _coreCmsDistributionServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Distribution/CoreCmsDistributionGradeController.cs b/CoreCms.Net.Web.Admin/Controllers/Distribution/CoreCmsDistributionGradeController.cs
index 99ebbb0..8a02f6f 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Distribution/CoreCmsDistributionGradeController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Distribution/CoreCmsDistributionGradeController.cs
@@ -37,7 +37,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsDistributionGradeController : Controller
     {
         private readonly ICoreCmsDistributionConditionServices _coreCmsDistributionConditionServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Distribution/CoreCmsDistributionOrderController.cs b/CoreCms.Net.Web.Admin/Controllers/Distribution/CoreCmsDistributionOrderController.cs
index 9129217..007e34e 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Distribution/CoreCmsDistributionOrderController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Distribution/CoreCmsDistributionOrderController.cs
@@ -39,7 +39,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsDistributionOrderController : Controller
     {
         private readonly IWebHostEnvironment _webHostEnvironment;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Distribution/CoreCmsDistributionResultController.cs b/CoreCms.Net.Web.Admin/Controllers/Distribution/CoreCmsDistributionResultController.cs
index 567c430..4fae2b6 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Distribution/CoreCmsDistributionResultController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Distribution/CoreCmsDistributionResultController.cs
@@ -38,7 +38,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsDistributionResultController : Controller
     {
         private readonly ICoreCmsDistributionResultServices _coreCmsDistributionResultServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Distribution/CoreCmsDistributionSettingController.cs b/CoreCms.Net.Web.Admin/Controllers/Distribution/CoreCmsDistributionSettingController.cs
index 8d56413..ca45402 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Distribution/CoreCmsDistributionSettingController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Distribution/CoreCmsDistributionSettingController.cs
@@ -37,7 +37,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsDistributionSettingController : Controller
     {
         private readonly IWebHostEnvironment _webHostEnvironment;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Financial/CoreCmsBillPaymentsController.cs b/CoreCms.Net.Web.Admin/Controllers/Financial/CoreCmsBillPaymentsController.cs
index 0279a96..85f7cde 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Financial/CoreCmsBillPaymentsController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Financial/CoreCmsBillPaymentsController.cs
@@ -39,7 +39,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsBillPaymentsController : Controller
     {
         private readonly ICoreCmsBillPaymentsServices _coreCmsBillPaymentsServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Financial/CoreCmsBillRefundController.cs b/CoreCms.Net.Web.Admin/Controllers/Financial/CoreCmsBillRefundController.cs
index e48a280..bceb40b 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Financial/CoreCmsBillRefundController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Financial/CoreCmsBillRefundController.cs
@@ -39,7 +39,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsBillRefundController : Controller
     {
         private readonly ICoreCmsBillRefundServices _coreCmsBillRefundServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Financial/CoreCmsInvoiceController.cs b/CoreCms.Net.Web.Admin/Controllers/Financial/CoreCmsInvoiceController.cs
index 73b1f27..3cdf9f2 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Financial/CoreCmsInvoiceController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Financial/CoreCmsInvoiceController.cs
@@ -39,7 +39,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsInvoiceController : Controller
     {
         private readonly ICoreCmsInvoiceServices _coreCmsInvoiceServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Financial/CoreCmsPaymentsController.cs b/CoreCms.Net.Web.Admin/Controllers/Financial/CoreCmsPaymentsController.cs
index e5f21e7..60df23a 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Financial/CoreCmsPaymentsController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Financial/CoreCmsPaymentsController.cs
@@ -36,7 +36,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsPaymentsController : Controller
     {
         private readonly ICoreCmsPaymentsServices _coreCmsPaymentsServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Good/CoreCmsBrandController.cs b/CoreCms.Net.Web.Admin/Controllers/Good/CoreCmsBrandController.cs
index cc04772..3f30beb 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Good/CoreCmsBrandController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Good/CoreCmsBrandController.cs
@@ -36,7 +36,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsBrandController : Controller
     {
         private readonly ICoreCmsBrandServices _coreCmsBrandServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Good/CoreCmsGoodsCategoryController.cs b/CoreCms.Net.Web.Admin/Controllers/Good/CoreCmsGoodsCategoryController.cs
index 482d886..1a020df 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Good/CoreCmsGoodsCategoryController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Good/CoreCmsGoodsCategoryController.cs
@@ -39,7 +39,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsGoodsCategoryController : Controller
     {
         private readonly IWebHostEnvironment _webHostEnvironment;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Good/CoreCmsGoodsCommentController.cs b/CoreCms.Net.Web.Admin/Controllers/Good/CoreCmsGoodsCommentController.cs
index 774ddf9..b7ab728 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Good/CoreCmsGoodsCommentController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Good/CoreCmsGoodsCommentController.cs
@@ -39,7 +39,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsGoodsCommentController : Controller
     {
         private readonly IWebHostEnvironment _webHostEnvironment;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Good/CoreCmsGoodsController.cs b/CoreCms.Net.Web.Admin/Controllers/Good/CoreCmsGoodsController.cs
index 4a6021f..1614931 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Good/CoreCmsGoodsController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Good/CoreCmsGoodsController.cs
@@ -40,7 +40,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsGoodsController : Controller
     {
         private readonly ICoreCmsBrandServices _brandServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Good/CoreCmsGoodsParamsController.cs b/CoreCms.Net.Web.Admin/Controllers/Good/CoreCmsGoodsParamsController.cs
index c91f964..a9edc77 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Good/CoreCmsGoodsParamsController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Good/CoreCmsGoodsParamsController.cs
@@ -39,7 +39,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsGoodsParamsController : Controller
     {
         private readonly ICoreCmsGoodsParamsServices _coreCmsGoodsParamsServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Good/CoreCmsGoodsTypeSpecController.cs b/CoreCms.Net.Web.Admin/Controllers/Good/CoreCmsGoodsTypeSpecController.cs
index 806f584..fd42d02 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Good/CoreCmsGoodsTypeSpecController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Good/CoreCmsGoodsTypeSpecController.cs
@@ -36,7 +36,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsGoodsTypeSpecController : Controller
     {
         private readonly ICoreCmsGoodsTypeSpecServices _coreCmsGoodsTypeSpecServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Good/CoreCmsProductsController.cs b/CoreCms.Net.Web.Admin/Controllers/Good/CoreCmsProductsController.cs
index 9e82061..a59ea61 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Good/CoreCmsProductsController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Good/CoreCmsProductsController.cs
@@ -39,7 +39,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsProductsController : Controller
     {
         private readonly IWebHostEnvironment _webHostEnvironment;
diff --git a/CoreCms.Net.Web.Admin/Controllers/IntelligentForms/CoreCmsFormController.cs b/CoreCms.Net.Web.Admin/Controllers/IntelligentForms/CoreCmsFormController.cs
index c61de89..60caa4a 100644
--- a/CoreCms.Net.Web.Admin/Controllers/IntelligentForms/CoreCmsFormController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/IntelligentForms/CoreCmsFormController.cs
@@ -38,7 +38,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsFormController : Controller
     {
         private readonly ICoreCmsFormServices _coreCmsFormServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/IntelligentForms/CoreCmsFormSubmitController.cs b/CoreCms.Net.Web.Admin/Controllers/IntelligentForms/CoreCmsFormSubmitController.cs
index 142ea62..5effc80 100644
--- a/CoreCms.Net.Web.Admin/Controllers/IntelligentForms/CoreCmsFormSubmitController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/IntelligentForms/CoreCmsFormSubmitController.cs
@@ -39,7 +39,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsFormSubmitController : Controller
     {
         private readonly IWebHostEnvironment _webHostEnvironment;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Message/CoreCmsMessageCenterController.cs b/CoreCms.Net.Web.Admin/Controllers/Message/CoreCmsMessageCenterController.cs
index 916b643..b4e474c 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Message/CoreCmsMessageCenterController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Message/CoreCmsMessageCenterController.cs
@@ -37,7 +37,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsMessageCenterController : Controller
     {
         private readonly ICoreCmsMessageCenterServices _coreCmsMessageCenterServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Message/CoreCmsSmsController.cs b/CoreCms.Net.Web.Admin/Controllers/Message/CoreCmsSmsController.cs
index 9ab234e..2b3947e 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Message/CoreCmsSmsController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Message/CoreCmsSmsController.cs
@@ -37,7 +37,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsSmsController : Controller
     {
         private readonly ICoreCmsSmsServices _coreCmsSmsServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Message/CoreCmsSmsSettingController.cs b/CoreCms.Net.Web.Admin/Controllers/Message/CoreCmsSmsSettingController.cs
index 6be3c6f..5849e07 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Message/CoreCmsSmsSettingController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Message/CoreCmsSmsSettingController.cs
@@ -37,7 +37,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsSmsSettingController : Controller
     {
         private readonly IWebHostEnvironment _webHostEnvironment;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Order/CoreCmsBillAftersalesController.cs b/CoreCms.Net.Web.Admin/Controllers/Order/CoreCmsBillAftersalesController.cs
index 145ebd5..79fd3e4 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Order/CoreCmsBillAftersalesController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Order/CoreCmsBillAftersalesController.cs
@@ -39,7 +39,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsBillAftersalesController : Controller
     {
         private readonly ICoreCmsBillAftersalesServices _coreCmsBillAftersalesServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Order/CoreCmsBillDeliveryController.cs b/CoreCms.Net.Web.Admin/Controllers/Order/CoreCmsBillDeliveryController.cs
index 111de48..1fbfee6 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Order/CoreCmsBillDeliveryController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Order/CoreCmsBillDeliveryController.cs
@@ -38,7 +38,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsBillDeliveryController : Controller
     {
         private readonly ICoreCmsAreaServices _areaServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Order/CoreCmsBillLadingController.cs b/CoreCms.Net.Web.Admin/Controllers/Order/CoreCmsBillLadingController.cs
index d9db0a9..0da81cc 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Order/CoreCmsBillLadingController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Order/CoreCmsBillLadingController.cs
@@ -38,7 +38,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsBillLadingController : Controller
     {
         private readonly ICoreCmsBillLadingServices _coreCmsBillLadingServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Order/CoreCmsBillReshipController.cs b/CoreCms.Net.Web.Admin/Controllers/Order/CoreCmsBillReshipController.cs
index 70d46bb..d27e6de 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Order/CoreCmsBillReshipController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Order/CoreCmsBillReshipController.cs
@@ -40,7 +40,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsBillReshipController : Controller
     {
         private readonly ICoreCmsBillReshipServices _coreCmsBillReshipServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Order/CoreCmsOrderController.cs b/CoreCms.Net.Web.Admin/Controllers/Order/CoreCmsOrderController.cs
index 106c2f0..57abdfe 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Order/CoreCmsOrderController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Order/CoreCmsOrderController.cs
@@ -45,7 +45,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsOrderController : Controller
     {
         private readonly IWebHostEnvironment _webHostEnvironment;
diff --git a/CoreCms.Net.Web.Admin/Controllers/PinTuan/CoreCmsPintuanRecordController.cs b/CoreCms.Net.Web.Admin/Controllers/PinTuan/CoreCmsPintuanRecordController.cs
index acfb2db..ce84eaf 100644
--- a/CoreCms.Net.Web.Admin/Controllers/PinTuan/CoreCmsPintuanRecordController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/PinTuan/CoreCmsPintuanRecordController.cs
@@ -35,7 +35,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsPinTuanRecordController : Controller
     {
         private readonly ICoreCmsPinTuanRecordServices _coreCmsPinTuanRecordServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/PinTuan/CoreCmsPintuanRuleController.cs b/CoreCms.Net.Web.Admin/Controllers/PinTuan/CoreCmsPintuanRuleController.cs
index 73916a8..2851367 100644
--- a/CoreCms.Net.Web.Admin/Controllers/PinTuan/CoreCmsPintuanRuleController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/PinTuan/CoreCmsPintuanRuleController.cs
@@ -37,7 +37,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsPinTuanRuleController : Controller
     {
         private readonly ICoreCmsGoodsServices _coreCmsGoodsServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Promotion/CoreCmsPromotionController.cs b/CoreCms.Net.Web.Admin/Controllers/Promotion/CoreCmsPromotionController.cs
index 4ee7a41..03f83a0 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Promotion/CoreCmsPromotionController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Promotion/CoreCmsPromotionController.cs
@@ -39,7 +39,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsPromotionController : Controller
     {
         private readonly IWebHostEnvironment _webHostEnvironment;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Reports/CoreCmsReportsController.cs b/CoreCms.Net.Web.Admin/Controllers/Reports/CoreCmsReportsController.cs
index 78adcd1..4ca9ce9 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Reports/CoreCmsReportsController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Reports/CoreCmsReportsController.cs
@@ -36,7 +36,7 @@ namespace CoreCms.Net.Web.Admin.Controllers.Content
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsReportsController : Controller
     {
         private readonly ICoreCmsReportsServices _reportsServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/ServiceGoods/CoreCmsServicesController.cs b/CoreCms.Net.Web.Admin/Controllers/ServiceGoods/CoreCmsServicesController.cs
index bfff23d..7b3974a 100644
--- a/CoreCms.Net.Web.Admin/Controllers/ServiceGoods/CoreCmsServicesController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/ServiceGoods/CoreCmsServicesController.cs
@@ -39,7 +39,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsServicesController : Controller
     {
         private readonly IWebHostEnvironment _webHostEnvironment;
diff --git a/CoreCms.Net.Web.Admin/Controllers/ServiceGoods/CoreCmsUserServicesOrderController.cs b/CoreCms.Net.Web.Admin/Controllers/ServiceGoods/CoreCmsUserServicesOrderController.cs
index 21b69ca..d62f072 100644
--- a/CoreCms.Net.Web.Admin/Controllers/ServiceGoods/CoreCmsUserServicesOrderController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/ServiceGoods/CoreCmsUserServicesOrderController.cs
@@ -39,7 +39,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsUserServicesOrderController : Controller
     {
         private readonly IWebHostEnvironment _webHostEnvironment;
diff --git a/CoreCms.Net.Web.Admin/Controllers/ServiceGoods/CoreCmsUserServicesTicketController.cs b/CoreCms.Net.Web.Admin/Controllers/ServiceGoods/CoreCmsUserServicesTicketController.cs
index cc57540..9a81dc3 100644
--- a/CoreCms.Net.Web.Admin/Controllers/ServiceGoods/CoreCmsUserServicesTicketController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/ServiceGoods/CoreCmsUserServicesTicketController.cs
@@ -38,7 +38,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsUserServicesTicketController : Controller
     {
         private readonly IWebHostEnvironment _webHostEnvironment;
diff --git a/CoreCms.Net.Web.Admin/Controllers/ServiceGoods/CoreCmsUserServicesTicketVerificationLogController.cs b/CoreCms.Net.Web.Admin/Controllers/ServiceGoods/CoreCmsUserServicesTicketVerificationLogController.cs
index b649929..36fb5f1 100644
--- a/CoreCms.Net.Web.Admin/Controllers/ServiceGoods/CoreCmsUserServicesTicketVerificationLogController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/ServiceGoods/CoreCmsUserServicesTicketVerificationLogController.cs
@@ -39,7 +39,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsUserServicesTicketVerificationLogController : Controller
     {
         private readonly IWebHostEnvironment _webHostEnvironment;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsAreaController.cs b/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsAreaController.cs
index 25ae0f7..da65fcb 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsAreaController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsAreaController.cs
@@ -38,7 +38,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsAreaController : Controller
     {
         private readonly ICoreCmsAreaServices _coreCmsAreaServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsLogisticsController.cs b/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsLogisticsController.cs
index 3e650d8..48a7bad 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsLogisticsController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsLogisticsController.cs
@@ -36,7 +36,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsLogisticsController : Controller
     {
         private readonly ICoreCmsLogisticsServices _coreCmsLogisticsServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsNoticeController.cs b/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsNoticeController.cs
index cad14da..6c1ce99 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsNoticeController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsNoticeController.cs
@@ -36,7 +36,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsNoticeController : Controller
     {
         private readonly ICoreCmsNoticeServices _coreCmsNoticeServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsPagesController.cs b/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsPagesController.cs
index 9239291..f1bcff6 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsPagesController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsPagesController.cs
@@ -39,7 +39,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsPagesController : Controller
     {
         private readonly ICoreCmsArticleTypeServices _articleTypeServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsPagesItemsController.cs b/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsPagesItemsController.cs
index 6af339d..2f2370e 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsPagesItemsController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsPagesItemsController.cs
@@ -38,7 +38,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsPagesItemsController : Controller
     {
         private readonly ICoreCmsPagesItemsServices _coreCmsPagesItemsServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsServiceDescriptionController.cs b/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsServiceDescriptionController.cs
index 33515a4..07d2a57 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsServiceDescriptionController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsServiceDescriptionController.cs
@@ -39,7 +39,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsServiceDescriptionController : Controller
     {
         private readonly IWebHostEnvironment _webHostEnvironment;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsSettingController.cs b/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsSettingController.cs
index a66f803..9c9dc00 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsSettingController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsSettingController.cs
@@ -37,7 +37,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsSettingController : Controller
     {
         private readonly IWebHostEnvironment _webHostEnvironment;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsShipController.cs b/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsShipController.cs
index b4b7b87..cf47d17 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsShipController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsShipController.cs
@@ -39,7 +39,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsShipController : Controller
     {
         private readonly ICoreCmsShipServices _coreCmsShipServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsStoreController.cs b/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsStoreController.cs
index c7afc54..a329bc2 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsStoreController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Shop/CoreCmsStoreController.cs
@@ -36,7 +36,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsStoreController : Controller
     {
         private readonly ICoreCmsClerkServices _coreCmsClerkServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Solitaire/CoreCmsSolitaireController.cs b/CoreCms.Net.Web.Admin/Controllers/Solitaire/CoreCmsSolitaireController.cs
index 47fda5b..d87235e 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Solitaire/CoreCmsSolitaireController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Solitaire/CoreCmsSolitaireController.cs
@@ -40,7 +40,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsSolitaireController : Controller
     {
         private readonly IWebHostEnvironment _webHostEnvironment;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Solitaire/CoreCmsSolitaireItemsController.cs b/CoreCms.Net.Web.Admin/Controllers/Solitaire/CoreCmsSolitaireItemsController.cs
index f7675e8..8d070ce 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Solitaire/CoreCmsSolitaireItemsController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Solitaire/CoreCmsSolitaireItemsController.cs
@@ -40,7 +40,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsSolitaireItemsController : Controller
     {
         private readonly IWebHostEnvironment _webHostEnvironment;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Stock/CoreCmsStockController.cs b/CoreCms.Net.Web.Admin/Controllers/Stock/CoreCmsStockController.cs
index 12bec0c..469b08b 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Stock/CoreCmsStockController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Stock/CoreCmsStockController.cs
@@ -40,7 +40,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsStockController : Controller
     {
         private readonly IWebHostEnvironment _webHostEnvironment;
diff --git a/CoreCms.Net.Web.Admin/Controllers/Stock/CoreCmsStockLogController.cs b/CoreCms.Net.Web.Admin/Controllers/Stock/CoreCmsStockLogController.cs
index ba46d59..e8a3c78 100644
--- a/CoreCms.Net.Web.Admin/Controllers/Stock/CoreCmsStockLogController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/Stock/CoreCmsStockLogController.cs
@@ -39,7 +39,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsStockLogController : Controller
     {
         private readonly IWebHostEnvironment _webHostEnvironment;
diff --git a/CoreCms.Net.Web.Admin/Controllers/System/CodeGeneratorController.cs b/CoreCms.Net.Web.Admin/Controllers/System/CodeGeneratorController.cs
index 877b920..16852c8 100644
--- a/CoreCms.Net.Web.Admin/Controllers/System/CodeGeneratorController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/System/CodeGeneratorController.cs
@@ -34,7 +34,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Description("代码生成器")]
     [Route("api/[controller]/[action]")]
     [ApiController]
-    //[Authorize]
+    //[Authorize(Permissions.Name)]
     public class CodeGeneratorController : Controller
     {
         private readonly ICodeGeneratorServices _codeGeneratorServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/System/SysDictionaryController.cs b/CoreCms.Net.Web.Admin/Controllers/System/SysDictionaryController.cs
index 177f4c1..4da37e8 100644
--- a/CoreCms.Net.Web.Admin/Controllers/System/SysDictionaryController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/System/SysDictionaryController.cs
@@ -36,7 +36,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class SysDictionaryController : Controller
     {
         private readonly ISysDictionaryDataServices _sysDictionaryDataServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/System/SysDictionaryDataController.cs b/CoreCms.Net.Web.Admin/Controllers/System/SysDictionaryDataController.cs
index 85cfd57..938db5b 100644
--- a/CoreCms.Net.Web.Admin/Controllers/System/SysDictionaryDataController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/System/SysDictionaryDataController.cs
@@ -36,7 +36,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class SysDictionaryDataController : Controller
     {
         private readonly ISysDictionaryDataServices _sysDictionaryDataServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/System/SysLoginRecordController.cs b/CoreCms.Net.Web.Admin/Controllers/System/SysLoginRecordController.cs
index 305597d..56b6e3c 100644
--- a/CoreCms.Net.Web.Admin/Controllers/System/SysLoginRecordController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/System/SysLoginRecordController.cs
@@ -39,7 +39,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class SysLoginRecordController : Controller
     {
         private readonly ISysLoginRecordServices _sysLoginRecordServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/System/SysMenuController.cs b/CoreCms.Net.Web.Admin/Controllers/System/SysMenuController.cs
index b571047..d70882f 100644
--- a/CoreCms.Net.Web.Admin/Controllers/System/SysMenuController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/System/SysMenuController.cs
@@ -39,7 +39,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class SysMenuController : Controller
     {
         private readonly IWebHostEnvironment _webHostEnvironment;
diff --git a/CoreCms.Net.Web.Admin/Controllers/System/SysNLogRecordsController.cs b/CoreCms.Net.Web.Admin/Controllers/System/SysNLogRecordsController.cs
index bb60bc0..3af731b 100644
--- a/CoreCms.Net.Web.Admin/Controllers/System/SysNLogRecordsController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/System/SysNLogRecordsController.cs
@@ -38,7 +38,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class SysNLogRecordsController : Controller
     {
         private readonly ISysNLogRecordsServices _sysNLogRecordsServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/System/SysOperRecordController.cs b/CoreCms.Net.Web.Admin/Controllers/System/SysOperRecordController.cs
index 49f7036..0376a9e 100644
--- a/CoreCms.Net.Web.Admin/Controllers/System/SysOperRecordController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/System/SysOperRecordController.cs
@@ -39,7 +39,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class SysOperRecordController : Controller
     {
         private readonly IWebHostEnvironment _webHostEnvironment;
diff --git a/CoreCms.Net.Web.Admin/Controllers/System/SysOrganizationController.cs b/CoreCms.Net.Web.Admin/Controllers/System/SysOrganizationController.cs
index 390b726..50cf3ce 100644
--- a/CoreCms.Net.Web.Admin/Controllers/System/SysOrganizationController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/System/SysOrganizationController.cs
@@ -39,7 +39,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class SysOrganizationController : Controller
     {
         private readonly IWebHostEnvironment _webHostEnvironment;
diff --git a/CoreCms.Net.Web.Admin/Controllers/System/SysRoleController.cs b/CoreCms.Net.Web.Admin/Controllers/System/SysRoleController.cs
index 33e3f7b..7b72b8e 100644
--- a/CoreCms.Net.Web.Admin/Controllers/System/SysRoleController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/System/SysRoleController.cs
@@ -38,7 +38,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class SysRoleController : Controller
     {
         private readonly ISysMenuServices _sysMenuServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/System/SysRoleMenuController.cs b/CoreCms.Net.Web.Admin/Controllers/System/SysRoleMenuController.cs
index 131568f..eaa7e6e 100644
--- a/CoreCms.Net.Web.Admin/Controllers/System/SysRoleMenuController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/System/SysRoleMenuController.cs
@@ -38,7 +38,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class SysRoleMenuController : Controller
     {
         private readonly ISysRoleMenuServices _sysRoleMenuServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/System/SysTaskLogController.cs b/CoreCms.Net.Web.Admin/Controllers/System/SysTaskLogController.cs
index 5934ed2..234d44d 100644
--- a/CoreCms.Net.Web.Admin/Controllers/System/SysTaskLogController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/System/SysTaskLogController.cs
@@ -39,7 +39,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class SysTaskLogController : Controller
     {
         private readonly ISysTaskLogServices _sysTaskLogServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/System/SysUserController.cs b/CoreCms.Net.Web.Admin/Controllers/System/SysUserController.cs
index cbd5f65..6adf444 100644
--- a/CoreCms.Net.Web.Admin/Controllers/System/SysUserController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/System/SysUserController.cs
@@ -38,8 +38,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
-    //[Authorize(Permissions.Name)]
+    [Authorize(Permissions.Name)]
     public class SysUserController : Controller
     {
         private readonly ISysOrganizationServices _sysOrganizationServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/System/SysUserRoleController.cs b/CoreCms.Net.Web.Admin/Controllers/System/SysUserRoleController.cs
index 53e1137..7fa82c7 100644
--- a/CoreCms.Net.Web.Admin/Controllers/System/SysUserRoleController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/System/SysUserRoleController.cs
@@ -38,7 +38,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class SysUserRoleController : Controller
     {
         private readonly ISysUserRoleServices _sysUserRoleServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/User/CoreCmsUserBalanceController.cs b/CoreCms.Net.Web.Admin/Controllers/User/CoreCmsUserBalanceController.cs
index b226581..2926978 100644
--- a/CoreCms.Net.Web.Admin/Controllers/User/CoreCmsUserBalanceController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/User/CoreCmsUserBalanceController.cs
@@ -38,7 +38,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsUserBalanceController : Controller
     {
         private readonly ICoreCmsUserBalanceServices _coreCmsUserBalanceServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/User/CoreCmsUserController.cs b/CoreCms.Net.Web.Admin/Controllers/User/CoreCmsUserController.cs
index bb3ba85..bdb48a5 100644
--- a/CoreCms.Net.Web.Admin/Controllers/User/CoreCmsUserController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/User/CoreCmsUserController.cs
@@ -39,7 +39,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsUserController : Controller
     {
         private readonly ICoreCmsUserBalanceServices _coreCmsUserBalanceServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/User/CoreCmsUserGradeController.cs b/CoreCms.Net.Web.Admin/Controllers/User/CoreCmsUserGradeController.cs
index 08d4cd2..c2d3b1f 100644
--- a/CoreCms.Net.Web.Admin/Controllers/User/CoreCmsUserGradeController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/User/CoreCmsUserGradeController.cs
@@ -36,7 +36,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsUserGradeController : Controller
     {
         private readonly ICoreCmsUserGradeServices _coreCmsUserGradeServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/User/CoreCmsUserTocashController.cs b/CoreCms.Net.Web.Admin/Controllers/User/CoreCmsUserTocashController.cs
index a865513..ba45bd5 100644
--- a/CoreCms.Net.Web.Admin/Controllers/User/CoreCmsUserTocashController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/User/CoreCmsUserTocashController.cs
@@ -39,7 +39,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsUserTocashController : Controller
     {
         private readonly ICoreCmsUserTocashServices _coreCmsUserTocashServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/WeChat/CoreCmsUserWeChatInfoController.cs b/CoreCms.Net.Web.Admin/Controllers/WeChat/CoreCmsUserWeChatInfoController.cs
index 57826d2..a87fec1 100644
--- a/CoreCms.Net.Web.Admin/Controllers/WeChat/CoreCmsUserWeChatInfoController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/WeChat/CoreCmsUserWeChatInfoController.cs
@@ -38,7 +38,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsUserWeChatInfoController : Controller
     {
         private readonly ICoreCmsUserWeChatInfoServices _coreCmsUserWeChatInfoServices;
diff --git a/CoreCms.Net.Web.Admin/Controllers/WeChat/CoreCmsUserWeChatMsgTemplateController.cs b/CoreCms.Net.Web.Admin/Controllers/WeChat/CoreCmsUserWeChatMsgTemplateController.cs
index a469752..761a450 100644
--- a/CoreCms.Net.Web.Admin/Controllers/WeChat/CoreCmsUserWeChatMsgTemplateController.cs
+++ b/CoreCms.Net.Web.Admin/Controllers/WeChat/CoreCmsUserWeChatMsgTemplateController.cs
@@ -39,7 +39,7 @@ namespace CoreCms.Net.Web.Admin.Controllers
     [Route("api/[controller]/[action]")]
     [ApiController]
     [RequiredErrorForAdmin]
-    [Authorize]
+    [Authorize(Permissions.Name)]
     public class CoreCmsUserWeChatMsgTemplateController : Controller
     {
         private readonly IWebHostEnvironment _webHostEnvironment;