diff --git a/jero-boot/jero-boot-module-system/src/main/java/com/jero/modules/system/controller/SysUserController.java b/jero-boot/jero-boot-module-system/src/main/java/com/jero/modules/system/controller/SysUserController.java
index 988a18406..62cb7118e 100644
--- a/jero-boot/jero-boot-module-system/src/main/java/com/jero/modules/system/controller/SysUserController.java
+++ b/jero-boot/jero-boot-module-system/src/main/java/com/jero/modules/system/controller/SysUserController.java
@@ -172,7 +172,8 @@ public class SysUserController {
     }
 
     //@RequiresRoles({"admin"})
-    @RequiresPermissions("user:edit")
+    @ApiOperation(value = "用户管理-编辑")
+    @RequiresPermissions("sys:user:edit")
     @RequestMapping(value = "/edit", method = RequestMethod.PUT)
     public Result<SysUser> edit(@RequestBody JSONObject jsonObject) {
         Result<SysUser> result = new Result<SysUser>();
@@ -202,7 +203,7 @@ public class SysUserController {
     }
 
     @ApiOperation(value = "用户管理-角色配置")
-    @RequiresPermissions("user:role")
+    @RequiresPermissions("sys:user:role")
     @RequestMapping(value = "/setRole", method = RequestMethod.POST)
     public Result<SysUser> setRole(@RequestBody JSONObject jsonObject) {
         Result<SysUser> result = new Result<SysUser>();
@@ -233,7 +234,7 @@ public class SysUserController {
     }
 
     @ApiOperation(value = "用户管理-部门配置")
-    @RequiresPermissions("user:depart")
+    @RequiresPermissions("sys:user:depart")
     @RequestMapping(value = "/setDepart", method = RequestMethod.POST)
     public Result<SysUser> setDepart(@RequestBody JSONObject jsonObject) {
         Result<SysUser> result = new Result<SysUser>();
@@ -333,7 +334,7 @@ public class SysUserController {
         return result;
     }
 
-    @RequiresPermissions("sys:user:list")
+    @RequiresPermissions("sys:user:edit")
     @RequestMapping(value = "/queryUserRole", method = RequestMethod.GET)
     public Result<List<String>> queryUserRole(@RequestParam(name = "userid", required = true) String userid) {
         Result<List<String>> result = new Result<>();
@@ -405,7 +406,7 @@ public class SysUserController {
      * @param userId
      * @return
      */
-    @RequiresPermissions("sys:user:list")
+    @RequiresPermissions("sys:user:edit")
     @RequestMapping(value = "/userDepartList", method = RequestMethod.GET)
     public Result<List<DepartIdModel>> getUserDepartsList(@RequestParam(name = "userId", required = true) String userId) {
         Result<List<DepartIdModel>> result = new Result<>();