diff --git a/bonus-modules/bonus-base/src/main/java/com/bonus/base/basic/controller/DevController.java b/bonus-modules/bonus-base/src/main/java/com/bonus/base/basic/controller/DevController.java
index e272c4f..6520a71 100644
--- a/bonus-modules/bonus-base/src/main/java/com/bonus/base/basic/controller/DevController.java
+++ b/bonus-modules/bonus-base/src/main/java/com/bonus/base/basic/controller/DevController.java
@@ -2,11 +2,13 @@ package com.bonus.base.basic.controller;
 
 import com.bonus.base.basic.domain.vo.DeviceVo;
 import com.bonus.base.basic.service.IDevService;
+import com.bonus.base.common.annotation.PreventRepeatSubmit;
 import com.bonus.common.core.web.controller.BaseController;
 import com.bonus.common.core.web.domain.AjaxResult;
 import com.bonus.common.core.web.page.TableDataInfo;
 import com.bonus.common.log.annotation.SysLog;
 import com.bonus.common.log.enums.OperaType;
+import com.bonus.common.security.annotation.RequiresPermissions;
 import io.swagger.annotations.Api;
 import io.swagger.annotations.ApiOperation;
 import org.springframework.web.bind.annotation.*;
@@ -26,7 +28,7 @@ public class DevController extends BaseController {
     private IDevService service;
 
     @ApiOperation(value = "查询设备数据")
-//    @RequiresPermissions("basic:dev:list")
+    @RequiresPermissions("basic:dev:list")
     @SysLog(title = "设备管理", businessType = OperaType.QUERY, logType = 1,module = "设备管理->查询设备数据")
     @GetMapping("queryDevList")
     public TableDataInfo queryDevList(DeviceVo vo) {
@@ -37,7 +39,7 @@ public class DevController extends BaseController {
 
     @ApiOperation(value = "新增设备")
 //    @PreventRepeatSubmit
-//    @RequiresPermissions("basic:dev:add")
+    @RequiresPermissions("basic:dev:add")
     @SysLog(title = "设备管理", businessType = OperaType.INSERT, logType = 1,module = "设备管理->新增设备")
     @PostMapping("addDev")
     public AjaxResult addDev(@RequestBody DeviceVo vo) {
@@ -52,7 +54,7 @@ public class DevController extends BaseController {
 
     @ApiOperation(value = "修改设备")
 //    @PreventRepeatSubmit
-//    @RequiresPermissions("basic:dev:edit")
+    @RequiresPermissions("basic:dev:edit")
     @SysLog(title = "设备管理", businessType = OperaType.UPDATE, logType = 1,module = "设备管理->修改设备")
     @PostMapping("editDev")
     public AjaxResult editDev(@RequestBody DeviceVo vo) {
@@ -61,7 +63,7 @@ public class DevController extends BaseController {
 
     @ApiOperation(value = "删除设备")
 //    @PreventRepeatSubmit
-//    @RequiresPermissions("basic:dev:del")
+    @RequiresPermissions("basic:dev:del")
     @SysLog(title = "设备管理", businessType = OperaType.UPDATE, logType = 1,module = "设备管理->删除设备")
     @PostMapping("delDev")
     public AjaxResult delDev(@RequestBody DeviceVo vo) {
diff --git a/bonus-modules/bonus-base/src/main/java/com/bonus/base/basic/controller/UnitController.java b/bonus-modules/bonus-base/src/main/java/com/bonus/base/basic/controller/UnitController.java
index 7c79a79..28f03e8 100644
--- a/bonus-modules/bonus-base/src/main/java/com/bonus/base/basic/controller/UnitController.java
+++ b/bonus-modules/bonus-base/src/main/java/com/bonus/base/basic/controller/UnitController.java
@@ -2,11 +2,13 @@ package com.bonus.base.basic.controller;
 
 import com.bonus.base.basic.domain.vo.UnitVo;
 import com.bonus.base.basic.service.IUnitService;
+import com.bonus.base.common.annotation.PreventRepeatSubmit;
 import com.bonus.common.core.web.controller.BaseController;
 import com.bonus.common.core.web.domain.AjaxResult;
 import com.bonus.common.core.web.page.TableDataInfo;
 import com.bonus.common.log.annotation.SysLog;
 import com.bonus.common.log.enums.OperaType;
+import com.bonus.common.security.annotation.RequiresPermissions;
 import io.swagger.annotations.Api;
 import io.swagger.annotations.ApiOperation;
 import org.springframework.web.bind.annotation.*;
@@ -30,7 +32,7 @@ public class UnitController extends BaseController {
     private IUnitService service;
 
     @ApiOperation(value = "查询单位数据")
-//    @RequiresPermissions("basic:unit:list")
+    @RequiresPermissions("basic:unit:list")
     @SysLog(title = "单位管理", businessType = OperaType.QUERY, logType = 1,module = "单位管理->查询单位数据")
     @GetMapping("queryUnitList")
     public TableDataInfo queryUnitList(UnitVo vo) {
@@ -41,7 +43,7 @@ public class UnitController extends BaseController {
 
     @ApiOperation(value = "新增单位")
 //    @PreventRepeatSubmit
-//    @RequiresPermissions("basic:unit:add")
+    @RequiresPermissions("basic:unit:add")
     @SysLog(title = "单位管理", businessType = OperaType.INSERT, logType = 1,module = "单位管理->新增单位")
     @PostMapping("addUnit")
     public AjaxResult addUnit(@RequestBody UnitVo vo) {
@@ -56,7 +58,7 @@ public class UnitController extends BaseController {
 
     @ApiOperation(value = "修改单位")
 //    @PreventRepeatSubmit
-//    @RequiresPermissions("basic:unit:edit")
+    @RequiresPermissions("basic:unit:edit")
     @SysLog(title = "单位管理", businessType = OperaType.UPDATE, logType = 1,module = "单位管理->修改单位")
     @PostMapping("editUnit")
     public AjaxResult editUnit(@RequestBody UnitVo vo) {
@@ -65,7 +67,7 @@ public class UnitController extends BaseController {
 
     @ApiOperation(value = "删除单位")
 //    @PreventRepeatSubmit
-//    @RequiresPermissions("basic:unit:del")
+    @RequiresPermissions("basic:unit:del")
     @SysLog(title = "单位管理", businessType = OperaType.UPDATE, logType = 1,module = "单位管理->删除单位")
     @PostMapping("delUnit")
     public AjaxResult delUnit(@RequestBody UnitVo vo) {