From d532f6717f4226c3cb8fddfc7f6d81a9aff8b957 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E8=B5=B5=E5=BF=A0=E6=9E=97?= <170083662@qq.com>
Date: Thu, 6 Aug 2026 19:12:11 +0800
Subject: [PATCH] =?UTF-8?q?fix(security):=20=E7=A7=BB=E9=99=A4=E7=99=BB?=
 =?UTF-8?q?=E5=BD=95=E7=99=BD=E5=90=8D=E5=8D=95=E4=B8=AD=E7=9A=84=20/api/g?=
 =?UTF-8?q?rantCmsPermission=20=E6=8E=A5=E5=8F=A3?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- 从安全配置中剔除 /api/grantCmsPermission 接口的免认证访问
- 加强接口访问控制，防止未授权的权限授予操作
- 确保 CMS 权限管理接口需要严格认证验证
---
 .../java/com/gxwebsoft/common/core/security/SecurityConfig.java  | 1 -
 1 file changed, 1 deletion(-)

diff --git a/src/main/java/com/gxwebsoft/common/core/security/SecurityConfig.java b/src/main/java/com/gxwebsoft/common/core/security/SecurityConfig.java
index cd8525f..91fbc5a 100644
--- a/src/main/java/com/gxwebsoft/common/core/security/SecurityConfig.java
+++ b/src/main/java/com/gxwebsoft/common/core/security/SecurityConfig.java
@@ -43,7 +43,6 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
                         "/api/loginByUserId",
                         "/api/loginByEmail",
                         "/api/register",
-                        "/api/grantCmsPermission",
                         "/api/superAdminRegister",
                         "/api/findAccountByPhone",
                         "/api/resetPassword",