From ea3dc73db636c136d9c75738408af23e65f6c71c Mon Sep 17 00:00:00 2001
From: "1437892690@qq.com" <1437892690@qq.com>
Date: Thu, 6 Nov 2025 17:58:11 +0800
Subject: [PATCH] =?UTF-8?q?[=E5=8A=9F=E8=83=BD]=20Api=E6=8E=A5=E5=8F=A3?=
 =?UTF-8?q?=E5=BC=BA=E5=88=B6=E9=9C=80=E8=A6=81=E6=B7=BB=E5=8A=A0=E6=9D=83?=
 =?UTF-8?q?=E9=99=90=E6=8E=A7=E5=88=B6?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

关联 #[1547962277134336]Api接口强制需要添加权限控制 http://192.168.0.96:8090/demo/rdm.html#/story-detail/939050947543040/939050947543042/1547962277134336
---
 .../module/tenant/api/DownloadI18nTranslatePropertiesApi.java | 3 +++
 .../module/tenant/api/apiaudit/ApiAuditExportApi.java         | 3 +++
 .../module/tenant/api/file/DownloadClasspathImageApi.java     | 3 +++
 .../neatlogic/module/tenant/api/file/DownloadFileApi.java     | 3 +++
 .../neatlogic/module/tenant/api/file/DownloadImageApi.java    | 3 +++
 .../neatlogic/module/tenant/api/file/ImportFileCheckApi.java  | 3 +++
 .../java/neatlogic/module/tenant/api/file/UploadFileApi.java  | 3 +++
 .../java/neatlogic/module/tenant/api/file/UploadImageApi.java | 4 +++-
 .../java/neatlogic/module/tenant/api/form/FormExportApi.java  | 4 +++-
 .../module/tenant/api/form/FormVersionExportApi.java          | 4 +++-
 .../neatlogic/module/tenant/api/importexport/ExportApi.java   | 3 +++
 .../neatlogic/module/tenant/api/importexport/ImportApi.java   | 3 +++
 .../module/tenant/api/integration/IntegrationExportApi.java   | 4 +++-
 .../neatlogic/module/tenant/api/matrix/ExportMatrixApi.java   | 3 +++
 .../neatlogic/module/tenant/api/matrix/ImportMatrixApi.java   | 3 +++
 .../module/tenant/api/matrix/MatrixAttributeExportApi.java    | 4 +++-
 .../neatlogic/module/tenant/api/matrix/MatrixExportApi.java   | 4 +++-
 .../tenant/api/matrix/MatrixViewXmlFileDownloadApi.java       | 3 +++
 .../module/tenant/api/notify/ExportNotifyPolicyApi.java       | 3 +++
 .../module/tenant/api/notify/ImportNotifyPolicyApi.java       | 3 +++
 .../neatlogic/module/tenant/api/user/UserAvatarUploadApi.java | 4 +++-
 21 files changed, 63 insertions(+), 7 deletions(-)

diff --git a/src/main/java/neatlogic/module/tenant/api/DownloadI18nTranslatePropertiesApi.java b/src/main/java/neatlogic/module/tenant/api/DownloadI18nTranslatePropertiesApi.java
index f61da6ad..6b7cd1f3 100644
--- a/src/main/java/neatlogic/module/tenant/api/DownloadI18nTranslatePropertiesApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/DownloadI18nTranslatePropertiesApi.java
@@ -17,6 +17,8 @@ package neatlogic.module.tenant.api;
 
 import com.alibaba.fastjson.JSONArray;
 import com.alibaba.fastjson.JSONObject;
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.config.Config;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.restful.annotation.Description;
@@ -48,6 +50,7 @@ import java.util.Locale;
 import java.util.Map;
 
 @Service
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.SEARCH)
 public class DownloadI18nTranslatePropertiesApi extends PrivateBinaryStreamApiComponentBase {
     Logger logger = LoggerFactory.getLogger(DownloadI18nTranslatePropertiesApi.class);
diff --git a/src/main/java/neatlogic/module/tenant/api/apiaudit/ApiAuditExportApi.java b/src/main/java/neatlogic/module/tenant/api/apiaudit/ApiAuditExportApi.java
index ef795b0b..4f586d8b 100644
--- a/src/main/java/neatlogic/module/tenant/api/apiaudit/ApiAuditExportApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/apiaudit/ApiAuditExportApi.java
@@ -15,6 +15,8 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.*/
 
 package neatlogic.module.tenant.api.apiaudit;
 
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.restful.annotation.Description;
 import neatlogic.framework.restful.annotation.Input;
@@ -47,6 +49,7 @@ import java.nio.charset.StandardCharsets;
  */
 
 @Service
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.SEARCH)
 public class ApiAuditExportApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/file/DownloadClasspathImageApi.java b/src/main/java/neatlogic/module/tenant/api/file/DownloadClasspathImageApi.java
index f5140d83..eaa47a05 100644
--- a/src/main/java/neatlogic/module/tenant/api/file/DownloadClasspathImageApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/file/DownloadClasspathImageApi.java
@@ -17,6 +17,8 @@ package neatlogic.module.tenant.api.file;
 
 import com.alibaba.fastjson.JSONObject;
 import neatlogic.framework.asynchronization.threadlocal.TenantContext;
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.common.constvalue.CacheControlType;
 import neatlogic.framework.common.constvalue.systemuser.SystemUser;
@@ -39,6 +41,7 @@ import java.io.InputStream;
 
 @Service
 @AuthUser(SystemUser.ANONYMOUS)
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.SEARCH)
 public class DownloadClasspathImageApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/file/DownloadFileApi.java b/src/main/java/neatlogic/module/tenant/api/file/DownloadFileApi.java
index 5e9b7bca..4a502012 100644
--- a/src/main/java/neatlogic/module/tenant/api/file/DownloadFileApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/file/DownloadFileApi.java
@@ -18,6 +18,8 @@ package neatlogic.module.tenant.api.file;
 import com.alibaba.fastjson.JSONObject;
 import neatlogic.framework.asynchronization.threadlocal.TenantContext;
 import neatlogic.framework.asynchronization.threadlocal.UserContext;
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.common.constvalue.CacheControlType;
 import neatlogic.framework.common.constvalue.systemuser.SystemUser;
@@ -48,6 +50,7 @@ import java.util.Objects;
 
 @Service
 @AuthUser(SystemUser.AUTOEXEC)
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.SEARCH)
 public class DownloadFileApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/file/DownloadImageApi.java b/src/main/java/neatlogic/module/tenant/api/file/DownloadImageApi.java
index 1b0ed62c..ea383c95 100644
--- a/src/main/java/neatlogic/module/tenant/api/file/DownloadImageApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/file/DownloadImageApi.java
@@ -16,6 +16,8 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.*/
 package neatlogic.module.tenant.api.file;
 
 import neatlogic.framework.asynchronization.threadlocal.TenantContext;
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.common.constvalue.CacheControlType;
 import neatlogic.framework.common.constvalue.systemuser.SystemUser;
@@ -41,6 +43,7 @@ import java.io.InputStream;
 
 @Service
 @AuthUser(SystemUser.ANONYMOUS)
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.SEARCH)
 public class DownloadImageApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/file/ImportFileCheckApi.java b/src/main/java/neatlogic/module/tenant/api/file/ImportFileCheckApi.java
index 5136f19f..00b184fe 100644
--- a/src/main/java/neatlogic/module/tenant/api/file/ImportFileCheckApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/file/ImportFileCheckApi.java
@@ -15,6 +15,8 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.*/
 
 package neatlogic.module.tenant.api.file;
 
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.dto.ValueTextVo;
 import neatlogic.framework.exception.file.FileExtNotAllowedException;
 import neatlogic.framework.exception.file.FileNotUploadException;
@@ -48,6 +50,7 @@ import java.util.zip.ZipInputStream;
  **/
 @Service
 @Transactional
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.SEARCH)
 public class ImportFileCheckApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/file/UploadFileApi.java b/src/main/java/neatlogic/module/tenant/api/file/UploadFileApi.java
index c5b2b539..5d8d7fe1 100644
--- a/src/main/java/neatlogic/module/tenant/api/file/UploadFileApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/file/UploadFileApi.java
@@ -19,6 +19,8 @@ import com.alibaba.fastjson.JSONArray;
 import com.alibaba.fastjson.JSONObject;
 import neatlogic.framework.asynchronization.threadlocal.TenantContext;
 import neatlogic.framework.asynchronization.threadlocal.UserContext;
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.common.constvalue.systemuser.SystemUser;
 import neatlogic.framework.common.util.FileUtil;
@@ -47,6 +49,7 @@ import java.util.List;
 @Service
 @Transactional
 @AuthUser(SystemUser.AUTOEXEC)
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.OPERATE)
 public class UploadFileApi extends PrivateBinaryStreamApiComponentBase {
     //static Logger logger = LoggerFactory.getLogger(UploadFileApi.class);
diff --git a/src/main/java/neatlogic/module/tenant/api/file/UploadImageApi.java b/src/main/java/neatlogic/module/tenant/api/file/UploadImageApi.java
index bafad5f4..e1fbb413 100644
--- a/src/main/java/neatlogic/module/tenant/api/file/UploadImageApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/file/UploadImageApi.java
@@ -18,6 +18,8 @@ package neatlogic.module.tenant.api.file;
 import com.alibaba.fastjson.JSONObject;
 import neatlogic.framework.asynchronization.threadlocal.TenantContext;
 import neatlogic.framework.asynchronization.threadlocal.UserContext;
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.util.FileUtil;
 import neatlogic.framework.exception.user.NoTenantException;
 import neatlogic.framework.file.dao.mapper.FileMapper;
@@ -39,7 +41,7 @@ import javax.servlet.http.HttpServletResponse;
 import java.util.Objects;
 
 @Service
-
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.CREATE)
 public class UploadImageApi extends PrivateBinaryStreamApiComponentBase {
     //static Logger logger = LoggerFactory.getLogger(UploadImageApi.class);
diff --git a/src/main/java/neatlogic/module/tenant/api/form/FormExportApi.java b/src/main/java/neatlogic/module/tenant/api/form/FormExportApi.java
index 38ccbc09..ccad58bb 100644
--- a/src/main/java/neatlogic/module/tenant/api/form/FormExportApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/form/FormExportApi.java
@@ -16,6 +16,8 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.*/
 package neatlogic.module.tenant.api.form;
 
 import com.alibaba.fastjson.JSONObject;
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.form.dao.mapper.FormMapper;
 import neatlogic.framework.form.dto.FormVersionVo;
@@ -41,7 +43,7 @@ import java.nio.charset.StandardCharsets;
 import java.util.List;
 
 @Service
-
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.SEARCH)
 public class FormExportApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/form/FormVersionExportApi.java b/src/main/java/neatlogic/module/tenant/api/form/FormVersionExportApi.java
index d3971108..cd8c8174 100644
--- a/src/main/java/neatlogic/module/tenant/api/form/FormVersionExportApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/form/FormVersionExportApi.java
@@ -16,6 +16,8 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.*/
 package neatlogic.module.tenant.api.form;
 
 import com.alibaba.fastjson.JSONObject;
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.form.dao.mapper.FormMapper;
 import neatlogic.framework.form.dto.FormVersionVo;
@@ -41,7 +43,7 @@ import java.net.URLEncoder;
 import java.nio.charset.StandardCharsets;
 
 @Service
-
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.SEARCH)
 public class FormVersionExportApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/importexport/ExportApi.java b/src/main/java/neatlogic/module/tenant/api/importexport/ExportApi.java
index 822963c4..4eb8134f 100644
--- a/src/main/java/neatlogic/module/tenant/api/importexport/ExportApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/importexport/ExportApi.java
@@ -16,6 +16,8 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.*/
 package neatlogic.module.tenant.api.importexport;
 
 import com.alibaba.fastjson.JSONObject;
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.exception.type.ParamIrregularException;
 import neatlogic.framework.importexport.core.ImportExportHandler;
@@ -41,6 +43,7 @@ import java.util.zip.ZipEntry;
 import java.util.zip.ZipOutputStream;
 
 @Component
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.UPDATE)
 public class ExportApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/importexport/ImportApi.java b/src/main/java/neatlogic/module/tenant/api/importexport/ImportApi.java
index 54809863..e0e5d54c 100644
--- a/src/main/java/neatlogic/module/tenant/api/importexport/ImportApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/importexport/ImportApi.java
@@ -16,6 +16,8 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.*/
 package neatlogic.module.tenant.api.importexport;
 
 import com.alibaba.fastjson.JSONObject;
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.exception.file.FileNotUploadException;
 import neatlogic.framework.importexport.core.ImportExportHandlerFactory;
@@ -35,6 +37,7 @@ import java.util.Map;
 
 @Component
 @Transactional
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.SEARCH)
 public class ImportApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/integration/IntegrationExportApi.java b/src/main/java/neatlogic/module/tenant/api/integration/IntegrationExportApi.java
index 7e4d6ba9..1dad2975 100644
--- a/src/main/java/neatlogic/module/tenant/api/integration/IntegrationExportApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/integration/IntegrationExportApi.java
@@ -15,6 +15,8 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.*/
 
 package neatlogic.module.tenant.api.integration;
 
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.exception.integration.IntegrationNotFoundException;
 import neatlogic.framework.integration.dao.mapper.IntegrationMapper;
@@ -40,7 +42,7 @@ import java.util.zip.ZipEntry;
 import java.util.zip.ZipOutputStream;
 
 @Service
-
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.SEARCH)
 public class IntegrationExportApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/matrix/ExportMatrixApi.java b/src/main/java/neatlogic/module/tenant/api/matrix/ExportMatrixApi.java
index 49bb47ee..3ee9fb50 100644
--- a/src/main/java/neatlogic/module/tenant/api/matrix/ExportMatrixApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/matrix/ExportMatrixApi.java
@@ -16,6 +16,8 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.*/
 package neatlogic.module.tenant.api.matrix;
 
 import com.alibaba.fastjson.JSONObject;
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.matrix.core.IMatrixDataSourceHandler;
 import neatlogic.framework.matrix.core.MatrixDataSourceHandlerFactory;
@@ -42,6 +44,7 @@ import java.util.zip.ZipEntry;
 import java.util.zip.ZipOutputStream;
 
 @Component
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.SEARCH)
 public class ExportMatrixApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/matrix/ImportMatrixApi.java b/src/main/java/neatlogic/module/tenant/api/matrix/ImportMatrixApi.java
index 7c146e90..eb91b8ec 100644
--- a/src/main/java/neatlogic/module/tenant/api/matrix/ImportMatrixApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/matrix/ImportMatrixApi.java
@@ -16,6 +16,8 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.*/
 package neatlogic.module.tenant.api.matrix;
 
 import com.alibaba.fastjson.JSONObject;
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.exception.file.FileExtNotAllowedException;
 import neatlogic.framework.exception.file.FileNotUploadException;
@@ -47,6 +49,7 @@ import java.util.zip.ZipInputStream;
 
 @Component
 @Transactional
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.UPDATE)
 public class ImportMatrixApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/matrix/MatrixAttributeExportApi.java b/src/main/java/neatlogic/module/tenant/api/matrix/MatrixAttributeExportApi.java
index 4d86d8da..c4c798e8 100644
--- a/src/main/java/neatlogic/module/tenant/api/matrix/MatrixAttributeExportApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/matrix/MatrixAttributeExportApi.java
@@ -15,6 +15,8 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.*/
 
 package neatlogic.module.tenant.api.matrix;
 
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.matrix.core.IMatrixDataSourceHandler;
 import neatlogic.framework.matrix.core.MatrixDataSourceHandlerFactory;
@@ -57,7 +59,7 @@ import java.util.List;
  * @create: 2020-03-26 19:05
  **/
 @Service
-
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.SEARCH)
 public class MatrixAttributeExportApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/matrix/MatrixExportApi.java b/src/main/java/neatlogic/module/tenant/api/matrix/MatrixExportApi.java
index c4412f18..871db5a3 100644
--- a/src/main/java/neatlogic/module/tenant/api/matrix/MatrixExportApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/matrix/MatrixExportApi.java
@@ -15,6 +15,8 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.*/
 
 package neatlogic.module.tenant.api.matrix;
 
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.common.constvalue.ExportFileType;
 import neatlogic.framework.matrix.core.IMatrixDataSourceHandler;
@@ -46,7 +48,7 @@ import java.io.OutputStream;
  * @create: 2020-03-26 19:04
  **/
 @Service
-
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.SEARCH)
 public class MatrixExportApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/matrix/MatrixViewXmlFileDownloadApi.java b/src/main/java/neatlogic/module/tenant/api/matrix/MatrixViewXmlFileDownloadApi.java
index 8dd1f865..538eedee 100644
--- a/src/main/java/neatlogic/module/tenant/api/matrix/MatrixViewXmlFileDownloadApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/matrix/MatrixViewXmlFileDownloadApi.java
@@ -15,6 +15,8 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.*/
 
 package neatlogic.module.tenant.api.matrix;
 
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.matrix.dao.mapper.MatrixMapper;
 import neatlogic.framework.matrix.dto.MatrixViewVo;
@@ -40,6 +42,7 @@ import java.io.InputStream;
 import java.nio.charset.StandardCharsets;
 
 @Service
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.SEARCH)
 public class MatrixViewXmlFileDownloadApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/notify/ExportNotifyPolicyApi.java b/src/main/java/neatlogic/module/tenant/api/notify/ExportNotifyPolicyApi.java
index a0065601..f1a7dbfe 100644
--- a/src/main/java/neatlogic/module/tenant/api/notify/ExportNotifyPolicyApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/notify/ExportNotifyPolicyApi.java
@@ -1,5 +1,7 @@
 package neatlogic.module.tenant.api.notify;
 
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.notify.core.INotifyPolicyHandler;
 import neatlogic.framework.notify.core.NotifyPolicyHandlerFactory;
@@ -23,6 +25,7 @@ import java.util.zip.ZipEntry;
 import java.util.zip.ZipOutputStream;
 
 @Component
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.SEARCH)
 public class ExportNotifyPolicyApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/notify/ImportNotifyPolicyApi.java b/src/main/java/neatlogic/module/tenant/api/notify/ImportNotifyPolicyApi.java
index 3bb7e00a..9ebdcde6 100644
--- a/src/main/java/neatlogic/module/tenant/api/notify/ImportNotifyPolicyApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/notify/ImportNotifyPolicyApi.java
@@ -2,6 +2,8 @@ package neatlogic.module.tenant.api.notify;
 
 import com.alibaba.fastjson.JSONObject;
 import neatlogic.framework.asynchronization.threadlocal.UserContext;
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.exception.file.FileExtNotAllowedException;
 import neatlogic.framework.exception.file.FileNotUploadException;
 import neatlogic.framework.notify.core.INotifyPolicyHandler;
@@ -33,6 +35,7 @@ import java.util.zip.ZipEntry;
 import java.util.zip.ZipInputStream;
 
 @Component
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.UPDATE)
 public class ImportNotifyPolicyApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/user/UserAvatarUploadApi.java b/src/main/java/neatlogic/module/tenant/api/user/UserAvatarUploadApi.java
index 022324fb..0f94a685 100644
--- a/src/main/java/neatlogic/module/tenant/api/user/UserAvatarUploadApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/user/UserAvatarUploadApi.java
@@ -18,6 +18,8 @@ package neatlogic.module.tenant.api.user;
 import com.alibaba.fastjson.JSONObject;
 import neatlogic.framework.asynchronization.threadlocal.TenantContext;
 import neatlogic.framework.asynchronization.threadlocal.UserContext;
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.util.FileUtil;
 import neatlogic.framework.dao.mapper.UserMapper;
 import neatlogic.framework.dto.UserVo;
@@ -42,7 +44,7 @@ import javax.servlet.http.HttpServletResponse;
 
 @Service
 @Transactional
-
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.OPERATE)
 public class UserAvatarUploadApi extends PrivateBinaryStreamApiComponentBase {
     //static Logger logger = LoggerFactory.getLogger(UserAvatarUploadApi.class);
-- 
Gitee