diff --git a/core/backend/src/main/java/io/dataease/controller/sys/SysLogController.java b/core/backend/src/main/java/io/dataease/controller/sys/SysLogController.java
index bdcc559e35..484223b0bb 100644
--- a/core/backend/src/main/java/io/dataease/controller/sys/SysLogController.java
+++ b/core/backend/src/main/java/io/dataease/controller/sys/SysLogController.java
@@ -15,6 +15,7 @@ import io.swagger.annotations.Api;
 import io.swagger.annotations.ApiImplicitParam;
 import io.swagger.annotations.ApiImplicitParams;
 import io.swagger.annotations.ApiOperation;
+import org.apache.shiro.authz.annotation.RequiresPermissions;
 import org.springframework.web.bind.annotation.*;
 
 import javax.annotation.Resource;
@@ -31,6 +32,7 @@ public class SysLogController {
 
     @I18n
     @ApiOperation("查询日志")
+    @RequiresPermissions("log:read")
     @PostMapping("/logGrid/{goPage}/{pageSize}")
     @ApiImplicitParams({
             @ApiImplicitParam(paramType = "path", name = "goPage", value = "页码", required = true, dataType = "Integer"),
@@ -52,6 +54,7 @@ public class SysLogController {
 
     @ApiOperation("导出操作日志")
     @PostMapping("/export")
+    @RequiresPermissions("log:export")
     @ApiImplicitParam(name = "request", value = "查询条件", required = true)
     @SqlInjectValidator(value = {"time"})
     public void export(@RequestBody LogGridRequest request) throws Exception {