diff --git a/src/main/java/com/xujie/sys/modules/pms/controller/PartSparePurchaseApplyController.java b/src/main/java/com/xujie/sys/modules/pms/controller/PartSparePurchaseApplyController.java
index 3b3fe632..5d8a9213 100644
--- a/src/main/java/com/xujie/sys/modules/pms/controller/PartSparePurchaseApplyController.java
+++ b/src/main/java/com/xujie/sys/modules/pms/controller/PartSparePurchaseApplyController.java
@@ -6,6 +6,7 @@ import com.xujie.sys.modules.pms.data.PartSparePurchaseApplyQueryData;
 import com.xujie.sys.modules.pms.entity.PartSparePurchaseApplyEntity;
 import com.xujie.sys.modules.pms.service.PartSparePurchaseApplyService;
 import lombok.extern.slf4j.Slf4j;
+import org.apache.shiro.authz.annotation.Logical;
 import org.apache.shiro.authz.annotation.RequiresPermissions;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.web.bind.annotation.PostMapping;
@@ -25,6 +26,7 @@ public class PartSparePurchaseApplyController {
     private PartSparePurchaseApplyService partSparePurchaseApplyService;
 
     @PostMapping("/queryPage")
+    @RequiresPermissions(value = {"partSpare:purchase:view", "partSpare:purchase:edit"}, logical = Logical.OR)
     public R queryPage(@RequestBody PartSparePurchaseApplyQueryData data) {
         PageUtils page = partSparePurchaseApplyService.queryPage(data);
         return R.ok().put("page", page);