diff --git a/ruoyi-bussiness/src/main/java/com/ruoyi/cms/controller/cms/CmsFileJobUploadController.java b/ruoyi-bussiness/src/main/java/com/ruoyi/cms/controller/cms/CmsFileJobUploadController.java
index 1868179..c01bdc2 100644
--- a/ruoyi-bussiness/src/main/java/com/ruoyi/cms/controller/cms/CmsFileJobUploadController.java
+++ b/ruoyi-bussiness/src/main/java/com/ruoyi/cms/controller/cms/CmsFileJobUploadController.java
@@ -43,7 +43,7 @@ public class CmsFileJobUploadController extends BaseController {
     }
 
     @ApiOperation("获取附件列表")
-    @PreAuthorize("@ss.hasPermi('cms:fileJobUpload:list')")
+//    @PreAuthorize("@ss.hasPermi('cms:fileJobUpload:list')")
     @GetMapping("/list")
     public TableDataInfo list(FileJobUpload file,HttpServletRequest request)
     {
diff --git a/ruoyi-framework/src/main/java/com/ruoyi/framework/config/SecurityConfig.java b/ruoyi-framework/src/main/java/com/ruoyi/framework/config/SecurityConfig.java
index 48f58cc..4e6f537 100644
--- a/ruoyi-framework/src/main/java/com/ruoyi/framework/config/SecurityConfig.java
+++ b/ruoyi-framework/src/main/java/com/ruoyi/framework/config/SecurityConfig.java
@@ -128,7 +128,8 @@ public class SecurityConfig
                 // 对于登录login 注册register 验证码captchaImage 允许匿名访问
                 requests.antMatchers("/login", "/register", "/captchaImage","/loginWeb","/websocket/**","/ws/**","/app/appLogin",
                                 "/app/appWxphoneSmsCode","/app/appLoginPhone","/app/sendSmsAgain","/app/idCardLogin","/app/phoneLogin",
-                                "/getTjmhToken","/getWwTjmhToken","/getWwTjmHlwToken","/actuator/health","/refreshToken","/system/dict/data/type/**").permitAll()
+                                "/getTjmhToken","/getWwTjmhToken","/getWwTjmHlwToken","/actuator/health","/refreshToken",
+                                "/system/dict/data/type/**","/cms/fileJobUpload/list").permitAll()
                     // 静态资源，可匿名访问
                     .antMatchers(HttpMethod.GET, "/", "/*.html", "/**/*.html", "/**/*.css", "/**/*.js", "/profile/**").permitAll()
                     // 移动端公用查询，可匿名访问