diff --git a/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/ApplicationApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/ApplicationApiController.java
index d88b197d..85481dc0 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/ApplicationApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/ApplicationApiController.java
@@ -8,6 +8,7 @@ import com.qqchen.deploy.backend.deploy.service.IApplicationService;
 import com.qqchen.deploy.backend.framework.api.Response;
 import com.qqchen.deploy.backend.framework.controller.BaseController;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import jakarta.annotation.Resource;
 import jakarta.servlet.http.HttpServletResponse;
 import org.springframework.web.bind.annotation.GetMapping;
@@ -19,6 +20,7 @@ import java.util.List;
 @Tag(name = "应用管理", description = "应用管理相关接口")
 @RestController
 @RequestMapping("/api/v1/applications")
+@PermissionPrefix("deploy:application")
 public class ApplicationApiController extends BaseController<Application, ApplicationDTO, Long, ApplicationQuery> {
 
     @Resource
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/ApplicationCategoryApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/ApplicationCategoryApiController.java
index c9812403..a6d9b39e 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/ApplicationCategoryApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/ApplicationCategoryApiController.java
@@ -5,6 +5,7 @@ import com.qqchen.deploy.backend.deploy.entity.ApplicationCategory;
 import com.qqchen.deploy.backend.deploy.query.ApplicationCategoryQuery;
 import com.qqchen.deploy.backend.framework.controller.BaseController;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import jakarta.servlet.http.HttpServletResponse;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.web.bind.annotation.RequestMapping;
@@ -18,6 +19,7 @@ import java.util.List;
 @Slf4j
 @RestController
 @RequestMapping("/api/v1/application-category")
+@PermissionPrefix("deploy:application-category")
 @Tag(name = "应用分类管理", description = "应用分类的增删改查接口")
 public class ApplicationCategoryApiController extends BaseController<ApplicationCategory, ApplicationCategoryDTO, Long, ApplicationCategoryQuery> {
     
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/EnvironmentApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/EnvironmentApiController.java
index d7bfff5d..0a51338b 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/EnvironmentApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/EnvironmentApiController.java
@@ -5,6 +5,7 @@ import com.qqchen.deploy.backend.deploy.entity.Environment;
 import com.qqchen.deploy.backend.deploy.query.EnvironmentQuery;
 import com.qqchen.deploy.backend.framework.controller.BaseController;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import jakarta.servlet.http.HttpServletResponse;
 import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RestController;
@@ -17,6 +18,7 @@ import java.util.List;
 @Tag(name = "环境管理", description = "环境管理相关接口")
 @RestController
 @RequestMapping("/api/v1/environments")
+@PermissionPrefix("deploy:environment")
 public class EnvironmentApiController extends BaseController<Environment, EnvironmentDTO, Long, EnvironmentQuery> {
 
     @Override
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/ExternalSystemApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/ExternalSystemApiController.java
index 47dec01a..88cc937a 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/ExternalSystemApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/ExternalSystemApiController.java
@@ -9,6 +9,7 @@ import com.qqchen.deploy.backend.deploy.service.IExternalSystemService;
 import io.swagger.v3.oas.annotations.Operation;
 import io.swagger.v3.oas.annotations.Parameter;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import jakarta.annotation.Resource;
 import jakarta.servlet.http.HttpServletResponse;
 import lombok.extern.slf4j.Slf4j;
@@ -30,6 +31,7 @@ import java.util.List;
 @Slf4j
 @RestController
 @RequestMapping("/api/v1/external-system")
+@PermissionPrefix("resource:external")
 @Tag(name = "第三方系统管理API", description = "对外提供的第三方系统管理接口")
 public class ExternalSystemApiController extends BaseController<ExternalSystem, ExternalSystemDTO, Long, ExternalSystemQuery> {
 
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/JenkinsBuildApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/JenkinsBuildApiController.java
index 57446664..d49ba091 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/JenkinsBuildApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/JenkinsBuildApiController.java
@@ -7,8 +7,11 @@ import com.qqchen.deploy.backend.deploy.dto.JenkinsBuildDTO;
 import com.qqchen.deploy.backend.deploy.query.JenkinsBuildQuery;
 import com.qqchen.deploy.backend.deploy.service.IJenkinsBuildService;
 import io.swagger.v3.oas.annotations.Operation;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import io.swagger.v3.oas.annotations.Parameter;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import jakarta.annotation.Resource;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.web.bind.annotation.*;
@@ -21,6 +24,7 @@ import java.util.List;
 @Slf4j
 @RestController
 @RequestMapping("/api/v1/jenkins-build")
+@PermissionPrefix("resource:jenkins-build")
 @Tag(name = "Jenkins构建信息管理", description = "Jenkins构建信息管理相关接口")
 public class JenkinsBuildApiController extends BaseController<JenkinsBuild, JenkinsBuildDTO, Long, JenkinsBuildQuery> {
     
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/JenkinsJobApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/JenkinsJobApiController.java
index 57a678ba..9f0f1716 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/JenkinsJobApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/JenkinsJobApiController.java
@@ -7,8 +7,11 @@ import com.qqchen.deploy.backend.deploy.dto.JenkinsJobDTO;
 import com.qqchen.deploy.backend.deploy.query.JenkinsJobQuery;
 import com.qqchen.deploy.backend.deploy.service.IJenkinsJobService;
 import io.swagger.v3.oas.annotations.Operation;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import io.swagger.v3.oas.annotations.Parameter;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import jakarta.annotation.Resource;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.web.bind.annotation.*;
@@ -21,6 +24,7 @@ import java.util.List;
 @Slf4j
 @RestController
 @RequestMapping("/api/v1/jenkins-job")
+@PermissionPrefix("resource:jenkins-job")
 @Tag(name = "Jenkins工作管理", description = "Jenkins工作管理相关接口")
 public class JenkinsJobApiController extends BaseController<JenkinsJob, JenkinsJobDTO, Long, JenkinsJobQuery> {
     
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/JenkinsSyncHistoryApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/JenkinsSyncHistoryApiController.java
index c287725d..62d87cec 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/JenkinsSyncHistoryApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/JenkinsSyncHistoryApiController.java
@@ -5,6 +5,7 @@ import com.qqchen.deploy.backend.deploy.entity.JenkinsSyncHistory;
 import com.qqchen.deploy.backend.deploy.dto.JenkinsSyncHistoryDTO;
 import com.qqchen.deploy.backend.deploy.query.JenkinsSyncHistoryQuery;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RestController;
@@ -17,6 +18,7 @@ import java.util.List;
 @Slf4j
 @RestController
 @RequestMapping("/api/v1/jenkins-sync-history")
+@PermissionPrefix("resource:jenkins-sync")
 @Tag(name = "Jenkin同步日志管理", description = "Jenkin同步日志管理相关接口")
 public class JenkinsSyncHistoryApiController extends BaseController<JenkinsSyncHistory, JenkinsSyncHistoryDTO, Long, JenkinsSyncHistoryQuery> {
     
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/JenkinsViewApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/JenkinsViewApiController.java
index 3b7a2d04..d1d926ad 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/JenkinsViewApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/JenkinsViewApiController.java
@@ -7,8 +7,11 @@ import com.qqchen.deploy.backend.deploy.dto.JenkinsViewDTO;
 import com.qqchen.deploy.backend.deploy.query.JenkinsViewQuery;
 import com.qqchen.deploy.backend.deploy.service.IJenkinsViewService;
 import io.swagger.v3.oas.annotations.Operation;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import io.swagger.v3.oas.annotations.Parameter;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import jakarta.annotation.Resource;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.web.bind.annotation.*;
@@ -21,6 +24,7 @@ import java.util.List;
 @Slf4j
 @RestController
 @RequestMapping("/api/v1/jenkins-view")
+@PermissionPrefix("resource:jenkins-view")
 @Tag(name = "Jenkins视图管理", description = "Jenkins视图管理相关接口")
 public class JenkinsViewApiController extends BaseController<JenkinsView, JenkinsViewDTO, Long, JenkinsViewQuery> {
     
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/RepositoryBranchApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/RepositoryBranchApiController.java
index 1ec9d4cf..81d2d572 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/RepositoryBranchApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/RepositoryBranchApiController.java
@@ -7,8 +7,11 @@ import com.qqchen.deploy.backend.deploy.service.IRepositoryBranchService;
 import com.qqchen.deploy.backend.framework.api.Response;
 import com.qqchen.deploy.backend.framework.controller.BaseController;
 import io.swagger.v3.oas.annotations.Operation;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import io.swagger.v3.oas.annotations.Parameter;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import jakarta.annotation.Resource;
 import jakarta.servlet.http.HttpServletResponse;
 import lombok.extern.slf4j.Slf4j;
@@ -22,6 +25,7 @@ import java.util.List;
 @Slf4j
 @RestController
 @RequestMapping("/api/v1/repository-branch")
+@PermissionPrefix("resource:repository-branch")
 @Tag(name = "Git仓库分支管理", description = "Git仓库分支管理相关接口")
 public class RepositoryBranchApiController extends BaseController<RepositoryBranch, RepositoryBranchDTO, Long, RepositoryBranchQuery> {
 
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/RepositoryGroupApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/RepositoryGroupApiController.java
index 805d55ca..950ee164 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/RepositoryGroupApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/RepositoryGroupApiController.java
@@ -7,8 +7,11 @@ import com.qqchen.deploy.backend.deploy.service.IRepositoryGroupService;
 import com.qqchen.deploy.backend.framework.api.Response;
 import com.qqchen.deploy.backend.framework.controller.BaseController;
 import io.swagger.v3.oas.annotations.Operation;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import io.swagger.v3.oas.annotations.Parameter;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import jakarta.annotation.Resource;
 import jakarta.servlet.http.HttpServletResponse;
 import lombok.extern.slf4j.Slf4j;
@@ -22,6 +25,7 @@ import java.util.List;
 @Slf4j
 @RestController
 @RequestMapping("/api/v1/repository-group")
+@PermissionPrefix("resource:repository-group")
 @Tag(name = "Git仓库组管理", description = "Git仓库组管理相关接口")
 public class RepositoryGroupApiController extends BaseController<RepositoryGroup, RepositoryGroupDTO, Long, RepositoryGroupQuery> {
 
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/RepositoryProjectApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/RepositoryProjectApiController.java
index 6ff7037b..c46ad7de 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/RepositoryProjectApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/RepositoryProjectApiController.java
@@ -7,8 +7,11 @@ import com.qqchen.deploy.backend.deploy.service.IRepositoryProjectService;
 import com.qqchen.deploy.backend.framework.api.Response;
 import com.qqchen.deploy.backend.framework.controller.BaseController;
 import io.swagger.v3.oas.annotations.Operation;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import io.swagger.v3.oas.annotations.Parameter;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import jakarta.annotation.Resource;
 import jakarta.servlet.http.HttpServletResponse;
 import lombok.extern.slf4j.Slf4j;
@@ -22,6 +25,7 @@ import java.util.List;
 @Slf4j
 @RestController
 @RequestMapping("/api/v1/repository-project")
+@PermissionPrefix("resource:repository-project")
 @Tag(name = "Git仓库项目管理", description = "Git仓库项目管理相关接口")
 public class RepositoryProjectApiController extends BaseController<RepositoryProject, RepositoryProjectDTO, Long, RepositoryProjectQuery> {
 
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/ServerApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/ServerApiController.java
index c285e52d..31692431 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/ServerApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/ServerApiController.java
@@ -10,6 +10,7 @@ import com.qqchen.deploy.backend.framework.controller.BaseController;
 import io.swagger.v3.oas.annotations.Operation;
 import io.swagger.v3.oas.annotations.Parameter;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import jakarta.annotation.Resource;
 import jakarta.servlet.http.HttpServletResponse;
 import jakarta.validation.Valid;
@@ -24,6 +25,7 @@ import java.util.List;
 @Slf4j
 @RestController
 @RequestMapping("/api/v1/server")
+@PermissionPrefix("deploy:server")
 @Tag(name = "服务器管理", description = "服务器管理相关接口")
 public class ServerApiController 
     extends BaseController<Server, ServerDTO, Long, ServerQuery> {
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/ServerCategoryApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/ServerCategoryApiController.java
index 1b10a2ce..d7c7e6d4 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/ServerCategoryApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/ServerCategoryApiController.java
@@ -6,6 +6,7 @@ import com.qqchen.deploy.backend.deploy.query.ServerCategoryQuery;
 import com.qqchen.deploy.backend.deploy.service.IServerCategoryService;
 import com.qqchen.deploy.backend.framework.controller.BaseController;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import jakarta.annotation.Resource;
 import jakarta.servlet.http.HttpServletResponse;
 import lombok.extern.slf4j.Slf4j;
@@ -20,6 +21,7 @@ import java.util.List;
 @Slf4j
 @RestController
 @RequestMapping("/api/v1/server-category")
+@PermissionPrefix("deploy:server-category")
 @Tag(name = "服务器分类管理", description = "服务器分类管理相关接口")
 public class ServerCategoryApiController 
     extends BaseController<ServerCategory, ServerCategoryDTO, Long, ServerCategoryQuery> {
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/TeamApplicationApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/TeamApplicationApiController.java
index e4d4ab9f..516ebb2a 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/TeamApplicationApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/TeamApplicationApiController.java
@@ -6,6 +6,7 @@ import com.qqchen.deploy.backend.deploy.query.TeamApplicationQuery;
 import com.qqchen.deploy.backend.deploy.service.ITeamApplicationService;
 import com.qqchen.deploy.backend.framework.controller.BaseController;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import jakarta.annotation.Resource;
 import jakarta.servlet.http.HttpServletResponse;
 import lombok.extern.slf4j.Slf4j;
@@ -20,6 +21,7 @@ import java.util.List;
 @Slf4j
 @RestController
 @RequestMapping("/api/v1/team-applications")
+@PermissionPrefix("deploy:team-application")
 @Tag(name = "团队应用关联管理", description = "团队应用关联的增删改查接口")
 public class TeamApplicationApiController extends BaseController<TeamApplication, TeamApplicationDTO, Long, TeamApplicationQuery> {
 
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/TeamConfigApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/TeamConfigApiController.java
index f454e54f..5ca9bba6 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/TeamConfigApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/TeamConfigApiController.java
@@ -7,8 +7,11 @@ import com.qqchen.deploy.backend.deploy.service.ITeamConfigService;
 import com.qqchen.deploy.backend.framework.api.Response;
 import com.qqchen.deploy.backend.framework.controller.BaseController;
 import io.swagger.v3.oas.annotations.Operation;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import io.swagger.v3.oas.annotations.Parameter;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import jakarta.annotation.Resource;
 import jakarta.servlet.http.HttpServletResponse;
 import lombok.extern.slf4j.Slf4j;
@@ -28,6 +31,7 @@ import java.util.List;
 @Slf4j
 @RestController
 @RequestMapping("/api/v1/team-configs")
+@PermissionPrefix("deploy:team-config")
 @Tag(name = "团队配置管理", description = "团队配置的增删改查接口")
 public class TeamConfigApiController extends BaseController<TeamConfig, TeamConfigDTO, Long, TeamConfigQuery> {
 
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/TeamMemberApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/TeamMemberApiController.java
index 51a71985..2750d4cc 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/TeamMemberApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/deploy/api/TeamMemberApiController.java
@@ -6,6 +6,7 @@ import com.qqchen.deploy.backend.deploy.query.TeamMemberQuery;
 import com.qqchen.deploy.backend.deploy.service.ITeamMemberService;
 import com.qqchen.deploy.backend.framework.controller.BaseController;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import jakarta.annotation.Resource;
 import jakarta.servlet.http.HttpServletResponse;
 import lombok.extern.slf4j.Slf4j;
@@ -20,6 +21,7 @@ import java.util.List;
 @Slf4j
 @RestController
 @RequestMapping("/api/v1/team-members")
+@PermissionPrefix("deploy:team-member")
 @Tag(name = "团队成员管理", description = "团队成员的增删改查接口")
 public class TeamMemberApiController extends BaseController<TeamMember, TeamMemberDTO, Long, TeamMemberQuery> {
 
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/notification/api/NotificationChannelApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/notification/api/NotificationChannelApiController.java
index cad06ae2..07160592 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/notification/api/NotificationChannelApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/notification/api/NotificationChannelApiController.java
@@ -8,8 +8,11 @@ import com.qqchen.deploy.backend.notification.entity.NotificationChannel;
 import com.qqchen.deploy.backend.notification.enums.NotificationChannelTypeEnum;
 import com.qqchen.deploy.backend.notification.service.INotificationChannelService;
 import io.swagger.v3.oas.annotations.Operation;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import io.swagger.v3.oas.annotations.Parameter;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import jakarta.annotation.Resource;
 import jakarta.servlet.http.HttpServletResponse;
 import lombok.extern.slf4j.Slf4j;
@@ -30,6 +33,7 @@ import java.util.stream.Collectors;
 @Slf4j
 @RestController
 @RequestMapping("/api/v1/notification-channel")
+@PermissionPrefix("notification:channel")
 @Tag(name = "通知渠道管理", description = "通知渠道管理相关接口")
 public class NotificationChannelApiController 
     extends BaseController<NotificationChannel, NotificationChannelDTO, Long, NotificationChannelQuery> {
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/schedule/api/ScheduleJobApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/schedule/api/ScheduleJobApiController.java
index a8c3da24..b0af42bb 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/schedule/api/ScheduleJobApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/schedule/api/ScheduleJobApiController.java
@@ -10,6 +10,7 @@ import com.qqchen.deploy.backend.schedule.service.IScheduleJobService;
 import io.swagger.v3.oas.annotations.Operation;
 import io.swagger.v3.oas.annotations.Parameter;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import jakarta.annotation.Resource;
 import jakarta.servlet.http.HttpServletResponse;
 import lombok.extern.slf4j.Slf4j;
@@ -25,6 +26,7 @@ import java.util.List;
 @Slf4j
 @RestController
 @RequestMapping("/api/v1/schedule/jobs")
+@PermissionPrefix("deploy:schedule-job")
 @Tag(name = "定时任务管理", description = "定时任务的增删改查及任务控制接口")
 public class ScheduleJobApiController extends BaseController<ScheduleJob, ScheduleJobDTO, Long, ScheduleJobQuery> {
 
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/schedule/api/ScheduleJobCategoryApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/schedule/api/ScheduleJobCategoryApiController.java
index 273fdfcc..e552a2c4 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/schedule/api/ScheduleJobCategoryApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/schedule/api/ScheduleJobCategoryApiController.java
@@ -5,6 +5,8 @@ import com.qqchen.deploy.backend.schedule.dto.ScheduleJobCategoryDTO;
 import com.qqchen.deploy.backend.schedule.entity.ScheduleJobCategory;
 import com.qqchen.deploy.backend.schedule.query.ScheduleJobCategoryQuery;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import jakarta.servlet.http.HttpServletResponse;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.web.bind.annotation.RequestMapping;
@@ -20,6 +22,7 @@ import java.util.List;
 @Slf4j
 @RestController
 @RequestMapping("/api/v1/schedule/job-categories")
+@PermissionPrefix("deploy:schedule-job-category")
 @Tag(name = "定时任务分类管理", description = "定时任务分类的增删改查接口")
 public class ScheduleJobCategoryApiController extends BaseController<ScheduleJobCategory, ScheduleJobCategoryDTO, Long, ScheduleJobCategoryQuery> {
 
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/schedule/api/ScheduleJobLogApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/schedule/api/ScheduleJobLogApiController.java
index 00192eff..731b093e 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/schedule/api/ScheduleJobLogApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/schedule/api/ScheduleJobLogApiController.java
@@ -5,6 +5,8 @@ import com.qqchen.deploy.backend.schedule.dto.ScheduleJobLogDTO;
 import com.qqchen.deploy.backend.schedule.entity.ScheduleJobLog;
 import com.qqchen.deploy.backend.schedule.query.ScheduleJobLogQuery;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RestController;
@@ -17,6 +19,7 @@ import org.springframework.web.bind.annotation.RestController;
 @Slf4j
 @RestController
 @RequestMapping("/api/v1/schedule/job-logs")
+@PermissionPrefix("deploy:schedule-job-log")
 @Tag(name = "定时任务执行日志", description = "查询任务执行历史日志")
 public class ScheduleJobLogApiController extends BaseController<ScheduleJobLog, ScheduleJobLogDTO, Long, ScheduleJobLogQuery> {
 
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/system/api/DepartmentApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/system/api/DepartmentApiController.java
index ac31d5f5..f1969afb 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/system/api/DepartmentApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/system/api/DepartmentApiController.java
@@ -3,6 +3,7 @@ package com.qqchen.deploy.backend.system.api;
 import com.qqchen.deploy.backend.system.entity.Department;
 import com.qqchen.deploy.backend.framework.api.Response;
 import com.qqchen.deploy.backend.framework.controller.BaseController;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import com.qqchen.deploy.backend.system.model.DepartmentDTO;
 import com.qqchen.deploy.backend.system.model.query.DepartmentQuery;
 import com.qqchen.deploy.backend.system.model.response.DepartmentResponse;
@@ -20,6 +21,7 @@ import java.util.List;
 @Tag(name = "部门管理")
 @RestController
 @RequestMapping("/api/v1/department")
+@PermissionPrefix("system:department")
 public class DepartmentApiController extends BaseController<Department, DepartmentDTO, Long, DepartmentQuery> {
 
     @Resource
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/system/api/MenuApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/system/api/MenuApiController.java
index f2a6fa58..6f84e905 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/system/api/MenuApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/system/api/MenuApiController.java
@@ -3,6 +3,7 @@ package com.qqchen.deploy.backend.system.api;
 import com.qqchen.deploy.backend.system.entity.Menu;
 import com.qqchen.deploy.backend.framework.api.Response;
 import com.qqchen.deploy.backend.framework.controller.BaseController;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import com.qqchen.deploy.backend.system.model.MenuDTO;
 import com.qqchen.deploy.backend.system.model.query.MenuQuery;
 import com.qqchen.deploy.backend.system.model.response.MenuPermissionTreeResponse;
@@ -23,6 +24,7 @@ import java.util.List;
 @RestController
 @RequestMapping("/api/v1/menu")
 @Tag(name = "菜单管理API", description = "对外提供的菜单管理接口")
+@PermissionPrefix("system:menu")
 public class MenuApiController extends BaseController<Menu, MenuDTO, Long, MenuQuery> {
 
     @Resource
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/system/api/PermissionApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/system/api/PermissionApiController.java
index adc1a86f..2c0f8947 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/system/api/PermissionApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/system/api/PermissionApiController.java
@@ -5,6 +5,7 @@ import com.qqchen.deploy.backend.framework.controller.BaseController;
 import com.qqchen.deploy.backend.system.model.PermissionDTO;
 import com.qqchen.deploy.backend.system.model.query.PermissionQuery;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import jakarta.servlet.http.HttpServletResponse;
 import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RestController;
@@ -14,6 +15,7 @@ import java.util.List;
 @Tag(name = "权限管理")
 @RestController
 @RequestMapping("/api/v1/permission")
+@PermissionPrefix("system:permission")
 public class PermissionApiController extends BaseController<Permission, PermissionDTO, Long, PermissionQuery> {
 
     @Override
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/system/api/RoleApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/system/api/RoleApiController.java
index 4f3545c4..51a98b9b 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/system/api/RoleApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/system/api/RoleApiController.java
@@ -3,6 +3,7 @@ package com.qqchen.deploy.backend.system.api;
 import com.qqchen.deploy.backend.system.entity.Role;
 import com.qqchen.deploy.backend.framework.api.Response;
 import com.qqchen.deploy.backend.framework.controller.BaseController;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import com.qqchen.deploy.backend.system.model.PermissionDTO;
 import com.qqchen.deploy.backend.system.model.RoleDTO;
 import com.qqchen.deploy.backend.system.model.query.RoleQuery;
@@ -18,6 +19,7 @@ import java.util.List;
 @Tag(name = "角色管理")
 @RestController
 @RequestMapping("/api/v1/role")
+@PermissionPrefix("system:role")
 public class RoleApiController extends BaseController<Role, RoleDTO, Long, RoleQuery> {
 
     @Resource
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/system/api/RoleTagApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/system/api/RoleTagApiController.java
index 76259516..5aa71432 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/system/api/RoleTagApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/system/api/RoleTagApiController.java
@@ -6,6 +6,7 @@ import com.qqchen.deploy.backend.system.model.RoleTagDTO;
 import com.qqchen.deploy.backend.system.model.query.RoleTagQuery;
 import com.qqchen.deploy.backend.system.service.IRoleTagService;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import jakarta.annotation.Resource;
 import jakarta.servlet.http.HttpServletResponse;
 import org.springframework.web.bind.annotation.RequestMapping;
@@ -15,6 +16,7 @@ import java.util.List;
 @Tag(name = "角色标签管理")
 @RestController
 @RequestMapping("/api/v1/role-tag")
+@PermissionPrefix("system:role-tag")
 public class RoleTagApiController extends BaseController<RoleTag, RoleTagDTO, Long, RoleTagQuery> {
 
     @Resource
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/system/api/TenantApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/system/api/TenantApiController.java
index 39f61687..92b81a05 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/system/api/TenantApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/system/api/TenantApiController.java
@@ -7,8 +7,11 @@ import com.qqchen.deploy.backend.system.model.TenantDTO;
 import com.qqchen.deploy.backend.system.model.query.TenantQuery;
 import com.qqchen.deploy.backend.system.service.ITenantService;
 import io.swagger.v3.oas.annotations.Operation;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import io.swagger.v3.oas.annotations.Parameter;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import jakarta.annotation.Resource;
 import jakarta.servlet.http.HttpServletResponse;
 import lombok.extern.slf4j.Slf4j;
@@ -28,6 +31,7 @@ import java.util.List;
 @Slf4j
 @RestController
 @RequestMapping("/api/v1/tenant")
+@PermissionPrefix("system:tenant")
 @Tag(name = "租户管理API", description = "对外提供的租户管理接口")
 public class TenantApiController extends BaseController<Tenant, TenantDTO, Long, TenantQuery> {
 
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/system/api/UserApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/system/api/UserApiController.java
index d2cb8eec..d25661e9 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/system/api/UserApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/system/api/UserApiController.java
@@ -4,6 +4,7 @@ import com.qqchen.deploy.backend.system.model.query.UserQuery;
 import com.qqchen.deploy.backend.system.model.request.DepartmentAssignRequest;
 import com.qqchen.deploy.backend.framework.controller.BaseController;
 import com.qqchen.deploy.backend.framework.api.Response;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import com.qqchen.deploy.backend.system.entity.User;
 import com.qqchen.deploy.backend.system.model.UserDTO;
 import com.qqchen.deploy.backend.system.model.request.LoginRequest;
@@ -21,6 +22,7 @@ import java.util.List;
 
 @RestController
 @RequestMapping("/api/v1/user")
+@PermissionPrefix("system:user")
 public class UserApiController extends BaseController<User, UserDTO, Long, UserQuery> {
 
     @Resource
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/ApprovalTaskApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/ApprovalTaskApiController.java
index 83a0c4c7..8e220275 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/ApprovalTaskApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/ApprovalTaskApiController.java
@@ -5,8 +5,12 @@ import com.qqchen.deploy.backend.workflow.dto.request.ApprovalTaskRequest;
 import com.qqchen.deploy.backend.workflow.dto.response.ApprovalTaskDTO;
 import com.qqchen.deploy.backend.workflow.service.IApprovalTaskService;
 import io.swagger.v3.oas.annotations.Operation;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import io.swagger.v3.oas.annotations.Parameter;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import jakarta.annotation.Resource;
 import jakarta.validation.Valid;
 import lombok.extern.slf4j.Slf4j;
@@ -23,6 +27,7 @@ import java.util.List;
 @Slf4j
 @RestController
 @RequestMapping("/api/v1/approval-tasks")
+@PermissionPrefix("workflow:approval")
 @Tag(name = "审批任务管理", description = "审批任务相关接口")
 public class ApprovalTaskApiController {
 
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/FormCategoryApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/FormCategoryApiController.java
index 7538d068..e469e6fb 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/FormCategoryApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/FormCategoryApiController.java
@@ -7,7 +7,10 @@ import com.qqchen.deploy.backend.workflow.dto.query.FormCategoryQuery;
 import com.qqchen.deploy.backend.workflow.entity.FormCategory;
 import com.qqchen.deploy.backend.workflow.service.IFormCategoryService;
 import io.swagger.v3.oas.annotations.Operation;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import jakarta.annotation.Resource;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.web.bind.annotation.*;
@@ -23,6 +26,7 @@ import java.util.List;
 @Slf4j
 @RestController
 @RequestMapping("/api/v1/forms/categories")
+@PermissionPrefix("workflow:form-category")
 @Tag(name = "表单分类管理", description = "表单分类管理相关接口")
 public class FormCategoryApiController extends BaseController<FormCategory, FormCategoryDTO, Long, FormCategoryQuery> {
 
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/FormDataApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/FormDataApiController.java
index 984ed71b..590748f5 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/FormDataApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/FormDataApiController.java
@@ -7,8 +7,12 @@ import com.qqchen.deploy.backend.workflow.dto.query.FormDataQuery;
 import com.qqchen.deploy.backend.workflow.entity.FormData;
 import com.qqchen.deploy.backend.workflow.service.IFormDataService;
 import io.swagger.v3.oas.annotations.Operation;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import io.swagger.v3.oas.annotations.Parameter;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import jakarta.annotation.Resource;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.web.bind.annotation.*;
@@ -22,6 +26,7 @@ import org.springframework.web.bind.annotation.*;
 @Slf4j
 @RestController
 @RequestMapping("/api/v1/forms/data")
+@PermissionPrefix("workflow:form-data")
 @Tag(name = "表单数据管理", description = "表单数据管理相关接口")
 public class FormDataApiController extends BaseController<FormData, FormDataDTO, Long, FormDataQuery> {
 
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/FormDefinitionApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/FormDefinitionApiController.java
index ee6259ea..459325a7 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/FormDefinitionApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/FormDefinitionApiController.java
@@ -9,6 +9,7 @@ import com.qqchen.deploy.backend.workflow.service.IFormDefinitionService;
 import io.swagger.v3.oas.annotations.Operation;
 import io.swagger.v3.oas.annotations.Parameter;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import jakarta.annotation.Resource;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.web.bind.annotation.*;
@@ -22,6 +23,7 @@ import org.springframework.web.bind.annotation.*;
 @Slf4j
 @RestController
 @RequestMapping("/api/v1/forms/definitions")
+@PermissionPrefix("workflow:form")
 @Tag(name = "表单定义管理", description = "表单定义管理相关接口")
 public class FormDefinitionApiController extends BaseController<FormDefinition, FormDefinitionDTO, Long, FormDefinitionQuery> {
 
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/WorkflowCategoryApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/WorkflowCategoryApiController.java
index 262d3575..24bb2aec 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/WorkflowCategoryApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/WorkflowCategoryApiController.java
@@ -5,6 +5,8 @@ import com.qqchen.deploy.backend.workflow.dto.WorkflowCategoryDTO;
 import com.qqchen.deploy.backend.workflow.dto.query.WorkflowCategoryQuery;
 import com.qqchen.deploy.backend.workflow.entity.WorkflowCategory;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import jakarta.servlet.http.HttpServletResponse;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.web.bind.annotation.RequestMapping;
@@ -21,6 +23,7 @@ import java.util.List;
 @Slf4j
 @RestController
 @RequestMapping("/api/v1/workflow/categories")
+@PermissionPrefix("workflow:category")
 @Tag(name = "工作流分类管理", description = "工作流分类相关接口")
 public class WorkflowCategoryApiController extends BaseController<WorkflowCategory, WorkflowCategoryDTO, Long, WorkflowCategoryQuery> {
 
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/WorkflowDefinitionApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/WorkflowDefinitionApiController.java
index af2838d6..56784fbd 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/WorkflowDefinitionApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/WorkflowDefinitionApiController.java
@@ -13,6 +13,7 @@ import com.qqchen.deploy.backend.workflow.service.IWorkflowDefinitionService;
 import io.swagger.v3.oas.annotations.Operation;
 import io.swagger.v3.oas.annotations.Parameter;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import jakarta.annotation.Resource;
 import jakarta.servlet.http.HttpServletResponse;
 import lombok.extern.slf4j.Slf4j;
@@ -34,6 +35,7 @@ import java.util.Map;
 @Slf4j
 @RestController
 @RequestMapping("/api/v1/workflow/definition")
+@PermissionPrefix("workflow:definition")
 @Tag(name = "工作流定义管理", description = "工作流定义管理相关接口")
 public class WorkflowDefinitionApiController extends BaseController<WorkflowDefinition, WorkflowDefinitionDTO, Long, WorkflowDefinitionQuery> {
 
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/WorkflowInstanceApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/WorkflowInstanceApiController.java
index ffe0808b..95e4b248 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/WorkflowInstanceApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/WorkflowInstanceApiController.java
@@ -13,6 +13,7 @@ import com.qqchen.deploy.backend.workflow.dto.query.WorkflowInstanceQuery;
 import com.qqchen.deploy.backend.workflow.service.IWorkflowInstanceService;
 import io.swagger.v3.oas.annotations.Operation;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import jakarta.annotation.Resource;
 import jakarta.servlet.http.HttpServletResponse;
 import lombok.extern.slf4j.Slf4j;
@@ -31,6 +32,7 @@ import java.util.List;
 @Slf4j
 @RestController
 @RequestMapping("/api/v1/workflow/instance")
+@PermissionPrefix("workflow:instance")
 @Tag(name = "工作流实例管理", description = "工作流定义实例相关接口")
 public class WorkflowInstanceApiController extends BaseController<WorkflowInstance, WorkflowInstanceDTO, Long, WorkflowInstanceQuery> {
 
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/WorkflowNodeDefinitionApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/WorkflowNodeDefinitionApiController.java
index bedd58e4..ede3084c 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/WorkflowNodeDefinitionApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/WorkflowNodeDefinitionApiController.java
@@ -9,8 +9,12 @@ import com.qqchen.deploy.backend.workflow.enums.NodeCategoryEnums;
 import com.qqchen.deploy.backend.workflow.dto.query.WorkflowNodeDefinitionQuery;
 import com.qqchen.deploy.backend.workflow.service.IWorkflowNodeDefinitionService;
 import io.swagger.v3.oas.annotations.Operation;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import io.swagger.v3.oas.annotations.Parameter;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import jakarta.annotation.Resource;
 import jakarta.servlet.http.HttpServletResponse;
 import lombok.extern.slf4j.Slf4j;
@@ -24,6 +28,7 @@ import java.util.List;
 @Slf4j
 @RestController
 @RequestMapping("/api/v1/workflow/node-definition")
+@PermissionPrefix("workflow:node-definition")
 @Tag(name = "工作流节点定义管理", description = "工作流节点定义管理相关接口")
 public class WorkflowNodeDefinitionApiController extends BaseController<WorkflowNodeDefinition, WorkflowNodeDefinitionDTO, Long, WorkflowNodeDefinitionQuery> {
 
diff --git a/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/WorkflowNodeInstanceApiController.java b/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/WorkflowNodeInstanceApiController.java
index c6675f7c..f48e6f31 100644
--- a/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/WorkflowNodeInstanceApiController.java
+++ b/backend/src/main/java/com/qqchen/deploy/backend/workflow/api/WorkflowNodeInstanceApiController.java
@@ -8,8 +8,12 @@ import com.qqchen.deploy.backend.workflow.dto.event.ShellLogEvent;
 import com.qqchen.deploy.backend.workflow.dto.query.WorkflowNodeInstanceQuery;
 import com.qqchen.deploy.backend.workflow.service.IWorkflowNodeInstanceService;
 import io.swagger.v3.oas.annotations.Operation;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import io.swagger.v3.oas.annotations.Parameter;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import io.swagger.v3.oas.annotations.tags.Tag;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
+import com.qqchen.deploy.backend.framework.security.annotation.PermissionPrefix;
 import jakarta.annotation.Resource;
 import jakarta.servlet.http.HttpServletResponse;
 import lombok.extern.slf4j.Slf4j;
@@ -28,6 +32,7 @@ import java.util.concurrent.ConcurrentHashMap;
 @Slf4j
 @RestController
 @RequestMapping("/api/v1/workflow/node")
+@PermissionPrefix("workflow:node-instance")
 @Tag(name = "工作流节点实例管理", description = "工作流节点实例管理相关接口")
 @CrossOrigin(origins = "*", allowedHeaders = "*")
 public class WorkflowNodeInstanceApiController extends BaseController<WorkflowNodeInstance, WorkflowNodeInstanceDTO, Long, WorkflowNodeInstanceQuery> {
diff --git a/backend/src/main/resources/db/changelog/changes/v1.0.0-data.sql b/backend/src/main/resources/db/changelog/changes/v1.0.0-data.sql
index 5405d76a..92da7c45 100644
--- a/backend/src/main/resources/db/changelog/changes/v1.0.0-data.sql
+++ b/backend/src/main/resources/db/changelog/changes/v1.0.0-data.sql
@@ -206,7 +206,202 @@ INSERT INTO sys_permission (id, create_time, menu_id, code, name, type, sort) VA
 (142, NOW(), 204, 'deploy:environment:view', '环境详情', 'FUNCTION', 2),
 (143, NOW(), 204, 'deploy:environment:create', '环境创建', 'FUNCTION', 3),
 (144, NOW(), 204, 'deploy:environment:update', '环境修改', 'FUNCTION', 4),
-(145, NOW(), 204, 'deploy:environment:delete', '环境删除', 'FUNCTION', 5);
+(145, NOW(), 204, 'deploy:environment:delete', '环境删除', 'FUNCTION', 5),
+
+-- 团队配置管理 (关联到团队管理菜单 menu_id=201)
+(151, NOW(), 201, 'deploy:team-config:list', '团队配置查询', 'FUNCTION', 11),
+(152, NOW(), 201, 'deploy:team-config:view', '团队配置详情', 'FUNCTION', 12),
+(153, NOW(), 201, 'deploy:team-config:update', '团队配置修改', 'FUNCTION', 13),
+
+-- 团队成员管理 (关联到团队管理菜单 menu_id=201)
+(161, NOW(), 201, 'deploy:team-member:list', '团队成员查询', 'FUNCTION', 21),
+(162, NOW(), 201, 'deploy:team-member:view', '团队成员详情', 'FUNCTION', 22),
+(163, NOW(), 201, 'deploy:team-member:create', '团队成员创建', 'FUNCTION', 23),
+(164, NOW(), 201, 'deploy:team-member:update', '团队成员修改', 'FUNCTION', 24),
+(165, NOW(), 201, 'deploy:team-member:delete', '团队成员删除', 'FUNCTION', 25),
+
+-- 团队应用管理 (关联到团队管理菜单 menu_id=201)
+(171, NOW(), 201, 'deploy:team-application:list', '团队应用查询', 'FUNCTION', 31),
+(172, NOW(), 201, 'deploy:team-application:view', '团队应用详情', 'FUNCTION', 32),
+(173, NOW(), 201, 'deploy:team-application:create', '团队应用创建', 'FUNCTION', 33),
+(174, NOW(), 201, 'deploy:team-application:update', '团队应用修改', 'FUNCTION', 34),
+(175, NOW(), 201, 'deploy:team-application:delete', '团队应用删除', 'FUNCTION', 35),
+
+-- 应用分类管理 (关联到应用管理菜单 menu_id=202)
+(181, NOW(), 202, 'deploy:application-category:list', '应用分类查询', 'FUNCTION', 11),
+(182, NOW(), 202, 'deploy:application-category:view', '应用分类详情', 'FUNCTION', 12),
+(183, NOW(), 202, 'deploy:application-category:create', '应用分类创建', 'FUNCTION', 13),
+(184, NOW(), 202, 'deploy:application-category:update', '应用分类修改', 'FUNCTION', 14),
+(185, NOW(), 202, 'deploy:application-category:delete', '应用分类删除', 'FUNCTION', 15),
+
+-- 服务器分类管理 (关联到服务器管理菜单 menu_id=301)
+(191, NOW(), 301, 'deploy:server-category:list', '服务器分类查询', 'FUNCTION', 11),
+(192, NOW(), 301, 'deploy:server-category:view', '服务器分类详情', 'FUNCTION', 12),
+(193, NOW(), 301, 'deploy:server-category:create', '服务器分类创建', 'FUNCTION', 13),
+(194, NOW(), 301, 'deploy:server-category:update', '服务器分类修改', 'FUNCTION', 14),
+(195, NOW(), 301, 'deploy:server-category:delete', '服务器分类删除', 'FUNCTION', 15),
+
+-- 定时任务日志 (关联到定时任务管理菜单 menu_id=203)
+(201, NOW(), 203, 'deploy:schedule-job-log:list', '任务日志查询', 'FUNCTION', 21),
+(202, NOW(), 203, 'deploy:schedule-job-log:view', '任务日志详情', 'FUNCTION', 22),
+(203, NOW(), 203, 'deploy:schedule-job-log:delete', '任务日志删除', 'FUNCTION', 23),
+
+-- 定时任务分类 (关联到定时任务管理菜单 menu_id=203)
+(211, NOW(), 203, 'deploy:schedule-job-category:list', '任务分类查询', 'FUNCTION', 31),
+(212, NOW(), 203, 'deploy:schedule-job-category:view', '任务分类详情', 'FUNCTION', 32),
+(213, NOW(), 203, 'deploy:schedule-job-category:create', '任务分类创建', 'FUNCTION', 33),
+(214, NOW(), 203, 'deploy:schedule-job-category:update', '任务分类修改', 'FUNCTION', 34),
+(215, NOW(), 203, 'deploy:schedule-job-category:delete', '任务分类删除', 'FUNCTION', 35),
+
+-- 资源管理权限（继续补充）
+-- 服务器管理 (menu_id=301)
+(221, NOW(), 301, 'resource:server:list', '服务器查询', 'FUNCTION', 1),
+(222, NOW(), 301, 'resource:server:view', '服务器详情', 'FUNCTION', 2),
+(223, NOW(), 301, 'resource:server:create', '服务器创建', 'FUNCTION', 3),
+(224, NOW(), 301, 'resource:server:update', '服务器修改', 'FUNCTION', 4),
+(225, NOW(), 301, 'resource:server:delete', '服务器删除', 'FUNCTION', 5),
+
+-- Jenkins管理 (menu_id=302)
+(231, NOW(), 302, 'resource:jenkins:list', 'Jenkins查询', 'FUNCTION', 1),
+(232, NOW(), 302, 'resource:jenkins:view', 'Jenkins详情', 'FUNCTION', 2),
+(233, NOW(), 302, 'resource:jenkins:create', 'Jenkins创建', 'FUNCTION', 3),
+(234, NOW(), 302, 'resource:jenkins:update', 'Jenkins修改', 'FUNCTION', 4),
+(235, NOW(), 302, 'resource:jenkins:delete', 'Jenkins删除', 'FUNCTION', 5),
+
+-- Jenkins Job管理 (关联到Jenkins管理菜单 menu_id=302)
+(241, NOW(), 302, 'resource:jenkins-job:list', 'Jenkins任务查询', 'FUNCTION', 11),
+(242, NOW(), 302, 'resource:jenkins-job:view', 'Jenkins任务详情', 'FUNCTION', 12),
+(243, NOW(), 302, 'resource:jenkins-job:create', 'Jenkins任务创建', 'FUNCTION', 13),
+(244, NOW(), 302, 'resource:jenkins-job:update', 'Jenkins任务修改', 'FUNCTION', 14),
+(245, NOW(), 302, 'resource:jenkins-job:delete', 'Jenkins任务删除', 'FUNCTION', 15),
+(246, NOW(), 302, 'resource:jenkins-job:sync', '同步Jenkins任务', 'FUNCTION', 16),
+
+-- Jenkins View管理 (关联到Jenkins管理菜单 menu_id=302)
+(251, NOW(), 302, 'resource:jenkins-view:list', 'Jenkins视图查询', 'FUNCTION', 21),
+(252, NOW(), 302, 'resource:jenkins-view:view', 'Jenkins视图详情', 'FUNCTION', 22),
+(253, NOW(), 302, 'resource:jenkins-view:sync', '同步Jenkins视图', 'FUNCTION', 23),
+
+-- Jenkins Build管理 (关联到Jenkins管理菜单 menu_id=302)
+(261, NOW(), 302, 'resource:jenkins-build:list', '构建记录查询', 'FUNCTION', 31),
+(262, NOW(), 302, 'resource:jenkins-build:view', '构建记录详情', 'FUNCTION', 32),
+(263, NOW(), 302, 'resource:jenkins-build:sync', '同步构建记录', 'FUNCTION', 33),
+
+-- Jenkins Sync History (关联到Jenkins管理菜单 menu_id=302)
+(271, NOW(), 302, 'resource:jenkins-sync:list', '同步历史查询', 'FUNCTION', 41),
+(272, NOW(), 302, 'resource:jenkins-sync:view', '同步历史详情', 'FUNCTION', 42),
+
+-- Git管理 (menu_id=303)
+(281, NOW(), 303, 'resource:git:list', 'Git查询', 'FUNCTION', 1),
+(282, NOW(), 303, 'resource:git:view', 'Git详情', 'FUNCTION', 2),
+(283, NOW(), 303, 'resource:git:create', 'Git创建', 'FUNCTION', 3),
+(284, NOW(), 303, 'resource:git:update', 'Git修改', 'FUNCTION', 4),
+(285, NOW(), 303, 'resource:git:delete', 'Git删除', 'FUNCTION', 5),
+
+-- 仓库组管理 (关联到Git管理菜单 menu_id=303)
+(291, NOW(), 303, 'resource:repository-group:list', '仓库组查询', 'FUNCTION', 11),
+(292, NOW(), 303, 'resource:repository-group:view', '仓库组详情', 'FUNCTION', 12),
+(293, NOW(), 303, 'resource:repository-group:create', '仓库组创建', 'FUNCTION', 13),
+(294, NOW(), 303, 'resource:repository-group:update', '仓库组修改', 'FUNCTION', 14),
+(295, NOW(), 303, 'resource:repository-group:delete', '仓库组删除', 'FUNCTION', 15),
+
+-- 仓库项目管理 (关联到Git管理菜单 menu_id=303)
+(301, NOW(), 303, 'resource:repository-project:list', '仓库项目查询', 'FUNCTION', 21),
+(302, NOW(), 303, 'resource:repository-project:view', '仓库项目详情', 'FUNCTION', 22),
+(303, NOW(), 303, 'resource:repository-project:create', '仓库项目创建', 'FUNCTION', 23),
+(304, NOW(), 303, 'resource:repository-project:update', '仓库项目修改', 'FUNCTION', 24),
+(305, NOW(), 303, 'resource:repository-project:delete', '仓库项目删除', 'FUNCTION', 25),
+(306, NOW(), 303, 'resource:repository-project:sync', '同步仓库项目', 'FUNCTION', 26),
+
+-- 仓库分支管理 (关联到Git管理菜单 menu_id=303)
+(311, NOW(), 303, 'resource:repository-branch:list', '仓库分支查询', 'FUNCTION', 31),
+(312, NOW(), 303, 'resource:repository-branch:view', '仓库分支详情', 'FUNCTION', 32),
+(313, NOW(), 303, 'resource:repository-branch:sync', '同步仓库分支', 'FUNCTION', 33),
+
+-- 三方系统管理 (menu_id=304)
+(321, NOW(), 304, 'resource:external:list', '三方系统查询', 'FUNCTION', 1),
+(322, NOW(), 304, 'resource:external:view', '三方系统详情', 'FUNCTION', 2),
+(323, NOW(), 304, 'resource:external:create', '三方系统创建', 'FUNCTION', 3),
+(324, NOW(), 304, 'resource:external:update', '三方系统修改', 'FUNCTION', 4),
+(325, NOW(), 304, 'resource:external:delete', '三方系统删除', 'FUNCTION', 5),
+
+-- 工作流管理权限（继续补充）
+-- 工作流设计 (menu_id=101)
+(331, NOW(), 101, 'workflow:definition:list', '工作流查询', 'FUNCTION', 1),
+(332, NOW(), 101, 'workflow:definition:view', '工作流详情', 'FUNCTION', 2),
+(333, NOW(), 101, 'workflow:definition:create', '工作流创建', 'FUNCTION', 3),
+(334, NOW(), 101, 'workflow:definition:update', '工作流修改', 'FUNCTION', 4),
+(335, NOW(), 101, 'workflow:definition:delete', '工作流删除', 'FUNCTION', 5),
+
+-- 工作流实例 (menu_id=102)
+(341, NOW(), 102, 'workflow:instance:list', '实例查询', 'FUNCTION', 1),
+(342, NOW(), 102, 'workflow:instance:view', '实例详情', 'FUNCTION', 2),
+(343, NOW(), 102, 'workflow:instance:create', '实例创建', 'FUNCTION', 3),
+(344, NOW(), 102, 'workflow:instance:update', '实例修改', 'FUNCTION', 4),
+(345, NOW(), 102, 'workflow:instance:delete', '实例删除', 'FUNCTION', 5),
+
+-- 节点定义管理 (关联到工作流设计菜单 menu_id=101)
+(351, NOW(), 101, 'workflow:node-definition:list', '节点定义查询', 'FUNCTION', 11),
+(352, NOW(), 101, 'workflow:node-definition:view', '节点定义详情', 'FUNCTION', 12),
+(353, NOW(), 101, 'workflow:node-definition:create', '节点定义创建', 'FUNCTION', 13),
+(354, NOW(), 101, 'workflow:node-definition:update', '节点定义修改', 'FUNCTION', 14),
+(355, NOW(), 101, 'workflow:node-definition:delete', '节点定义删除', 'FUNCTION', 15),
+
+-- 节点实例管理 (关联到工作流实例菜单 menu_id=102)
+(361, NOW(), 102, 'workflow:node-instance:list', '节点实例查询', 'FUNCTION', 11),
+(362, NOW(), 102, 'workflow:node-instance:view', '节点实例详情', 'FUNCTION', 12),
+(363, NOW(), 102, 'workflow:node-instance:update', '节点实例修改', 'FUNCTION', 13),
+(364, NOW(), 102, 'workflow:node-instance:delete', '节点实例删除', 'FUNCTION', 15),
+
+-- 工作流分类 (关联到工作流设计菜单 menu_id=101)
+(371, NOW(), 101, 'workflow:category:list', '工作流分类查询', 'FUNCTION', 21),
+(372, NOW(), 101, 'workflow:category:view', '工作流分类详情', 'FUNCTION', 22),
+(373, NOW(), 101, 'workflow:category:create', '工作流分类创建', 'FUNCTION', 23),
+(374, NOW(), 101, 'workflow:category:update', '工作流分类修改', 'FUNCTION', 24),
+(375, NOW(), 101, 'workflow:category:delete', '工作流分类删除', 'FUNCTION', 25),
+
+-- 表单管理 (menu_id=104)
+(381, NOW(), 104, 'workflow:form:list', '表单查询', 'FUNCTION', 1),
+(382, NOW(), 104, 'workflow:form:view', '表单详情', 'FUNCTION', 2),
+(383, NOW(), 104, 'workflow:form:create', '表单创建', 'FUNCTION', 3),
+(384, NOW(), 104, 'workflow:form:update', '表单修改', 'FUNCTION', 4),
+(385, NOW(), 104, 'workflow:form:delete', '表单删除', 'FUNCTION', 5),
+
+-- 表单数据管理 (关联到表单管理菜单 menu_id=104)
+(391, NOW(), 104, 'workflow:form-data:list', '表单数据查询', 'FUNCTION', 11),
+(392, NOW(), 104, 'workflow:form-data:view', '表单数据详情', 'FUNCTION', 12),
+(393, NOW(), 104, 'workflow:form-data:create', '表单数据创建', 'FUNCTION', 13),
+(394, NOW(), 104, 'workflow:form-data:update', '表单数据修改', 'FUNCTION', 14),
+(395, NOW(), 104, 'workflow:form-data:delete', '表单数据删除', 'FUNCTION', 15),
+
+-- 表单分类管理 (关联到表单管理菜单 menu_id=104)
+(401, NOW(), 104, 'workflow:form-category:list', '表单分类查询', 'FUNCTION', 21),
+(402, NOW(), 104, 'workflow:form-category:view', '表单分类详情', 'FUNCTION', 22),
+(403, NOW(), 104, 'workflow:form-category:create', '表单分类创建', 'FUNCTION', 23),
+(404, NOW(), 104, 'workflow:form-category:update', '表单分类修改', 'FUNCTION', 24),
+(405, NOW(), 104, 'workflow:form-category:delete', '表单分类删除', 'FUNCTION', 25),
+
+-- 审批任务管理 (关联到工作流实例菜单 menu_id=102)
+(411, NOW(), 102, 'workflow:approval:list', '审批任务查询', 'FUNCTION', 21),
+(412, NOW(), 102, 'workflow:approval:view', '审批任务详情', 'FUNCTION', 22),
+(413, NOW(), 102, 'workflow:approval:approve', '审批任务通过', 'FUNCTION', 23),
+(414, NOW(), 102, 'workflow:approval:reject', '审批任务驳回', 'FUNCTION', 24),
+(415, NOW(), 102, 'workflow:approval:transfer', '审批任务转交', 'FUNCTION', 25),
+
+-- 系统管理权限（继续补充）
+-- 角色标签管理 (关联到角色管理菜单 menu_id=3)
+(421, NOW(), 3, 'system:role-tag:list', '角色标签查询', 'FUNCTION', 11),
+(422, NOW(), 3, 'system:role-tag:view', '角色标签详情', 'FUNCTION', 12),
+(423, NOW(), 3, 'system:role-tag:create', '角色标签创建', 'FUNCTION', 13),
+(424, NOW(), 3, 'system:role-tag:update', '角色标签修改', 'FUNCTION', 14),
+(425, NOW(), 3, 'system:role-tag:delete', '角色标签删除', 'FUNCTION', 15),
+
+-- 通知管理权限
+-- 通知渠道管理 (关联到系统管理菜单 menu_id=1，因为通知渠道属于系统配置)
+(431, NOW(), 1, 'notification:channel:list', '通知渠道查询', 'FUNCTION', 11),
+(432, NOW(), 1, 'notification:channel:view', '通知渠道详情', 'FUNCTION', 12),
+(433, NOW(), 1, 'notification:channel:create', '通知渠道创建', 'FUNCTION', 13),
+(434, NOW(), 1, 'notification:channel:update', '通知渠道修改', 'FUNCTION', 14),
+(435, NOW(), 1, 'notification:channel:delete', '通知渠道删除', 'FUNCTION', 15);
 
 -- ==================== 分配权限给角色 ====================
 DELETE FROM sys_role_permission;