diff --git a/src/main/java/neatlogic/module/tenant/api/apimanage/ApiManageTreeSearchApi.java b/src/main/java/neatlogic/module/tenant/api/apimanage/ApiManageTreeSearchApi.java
index a0d2dda84ba506e63d8cc9102b115435eee4dc20..ea416a7f418dd712b858927f1ede22c4fb91b7e4 100644
--- a/src/main/java/neatlogic/module/tenant/api/apimanage/ApiManageTreeSearchApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/apimanage/ApiManageTreeSearchApi.java
@@ -19,6 +19,7 @@ package neatlogic.module.tenant.api.apimanage;
 import com.alibaba.fastjson.JSONObject;
 import neatlogic.framework.asynchronization.threadlocal.TenantContext;
 import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.API_AUDIT_VIEW;
 import neatlogic.framework.auth.label.INTERFACE_MODIFY;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.dto.module.ModuleGroupVo;
@@ -46,6 +47,7 @@ import java.util.*;
 
 @Service
 @AuthAction(action = INTERFACE_MODIFY.class)
+@AuthAction(action = API_AUDIT_VIEW.class)
 @OperationType(type = OperationTypeEnum.SEARCH)
 public class ApiManageTreeSearchApi extends PrivateApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/license/GetLicenseApi.java b/src/main/java/neatlogic/module/tenant/api/license/GetLicenseApi.java
index e1c57bd0f7415e9b635ef54c409223a11fb1faa5..625fa98062a6e54b891bd6f1c6117e41878fbff8 100644
--- a/src/main/java/neatlogic/module/tenant/api/license/GetLicenseApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/license/GetLicenseApi.java
@@ -19,6 +19,7 @@ package neatlogic.module.tenant.api.license;
 import com.alibaba.fastjson.JSONObject;
 import neatlogic.framework.auth.core.AuthAction;
 import neatlogic.framework.auth.label.ADMIN;
+import neatlogic.framework.auth.label.LICENSE_MODIFY;
 import neatlogic.framework.common.config.Config;
 import neatlogic.framework.dto.LicenseVo;
 import neatlogic.framework.restful.annotation.Description;
@@ -33,6 +34,7 @@ import org.springframework.stereotype.Service;
 
 @Service
 @AuthAction(action = ADMIN.class)
+@AuthAction(action = LICENSE_MODIFY.class)
 @OperationType(type = OperationTypeEnum.SEARCH)
 public class GetLicenseApi extends PrivateApiComponentBase {