diff --git a/src/main/java/com/gxwebsoft/cms/controller/CmsWebsiteController.java b/src/main/java/com/gxwebsoft/cms/controller/CmsWebsiteController.java
index 9aefeab..b2dd43e 100644
--- a/src/main/java/com/gxwebsoft/cms/controller/CmsWebsiteController.java
+++ b/src/main/java/com/gxwebsoft/cms/controller/CmsWebsiteController.java
@@ -92,7 +92,8 @@ public class CmsWebsiteController extends BaseController {
     return success(cmsWebsiteService.getByIdRelAll(id));
   }
 
-  @PreAuthorize("hasAuthority('cms:website:save')")
+  // 注册流程：新租户超管尚未被 grantCmsPermission 赋予 cms:website:save，允许超管直接创建首个站点
+  @PreAuthorize("hasAuthority('cms:website:save') or principal.getIsSuperAdmin() == true")
   @Operation(summary = "添加网站信息记录表")
   @PostMapping()
   public ApiResult<?> save(@RequestBody CmsWebsite cmsWebsite) {
@@ -127,7 +128,8 @@ public class CmsWebsiteController extends BaseController {
     return fail("创建失败");
   }
 
-  @PreAuthorize("hasAuthority('cms:website:update')")
+  // 注册流程：新租户超管尚未被 grantCmsPermission 赋予 cms:website:update，允许超管直接更新站点
+  @PreAuthorize("hasAuthority('cms:website:update') or principal.getIsSuperAdmin() == true")
   @Operation(summary = "修改网站信息记录表")
   @PutMapping()
   public ApiResult<?> update(@RequestBody CmsWebsite cmsWebsite) {
@@ -154,7 +156,8 @@ public class CmsWebsiteController extends BaseController {
     return fail("修改失败");
   }
 
-  @PreAuthorize("hasAuthority('cms:website:update')")
+  // 注册流程：新租户超管尚未被 grantCmsPermission 赋予 cms:website:update，允许超管直接更新站点
+  @PreAuthorize("hasAuthority('cms:website:update') or principal.getIsSuperAdmin() == true")
   @Operation(summary = "修改网站信息记录表")
   @PutMapping("/updateAll")
   public ApiResult<?> updateAll(@RequestBody CmsWebsite cmsWebsite) {