diff --git a/ruoyi-web/src/main/java/com/ruoyi/web/dashboard/DashboardController.java b/ruoyi-web/src/main/java/com/ruoyi/web/dashboard/DashboardController.java
index c4c11ee..a4c8bf9 100644
--- a/ruoyi-web/src/main/java/com/ruoyi/web/dashboard/DashboardController.java
+++ b/ruoyi-web/src/main/java/com/ruoyi/web/dashboard/DashboardController.java
@@ -1,6 +1,7 @@
 package com.ruoyi.web.dashboard;
 
 import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.web.bind.annotation.GetMapping;
 import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RestController;
@@ -19,6 +20,7 @@ public class DashboardController extends BaseController {
 
     // 获取统计数据
     @GetMapping("/brief")
+    @PreAuthorize("@ss.hasPermi('dashboard:brief')")
     public AjaxResult brief(BriefQuery query) {
         query.setScope(true);
         return AjaxResult.success(dashboardService.selectBrief(query));
diff --git a/ruoyi-web/src/main/java/com/ruoyi/web/dashboard/DashboardProjectController.java b/ruoyi-web/src/main/java/com/ruoyi/web/dashboard/DashboardProjectController.java
index 934f243..0e9e5da 100644
--- a/ruoyi-web/src/main/java/com/ruoyi/web/dashboard/DashboardProjectController.java
+++ b/ruoyi-web/src/main/java/com/ruoyi/web/dashboard/DashboardProjectController.java
@@ -1,6 +1,7 @@
 package com.ruoyi.web.dashboard;
 
 import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.web.bind.annotation.GetMapping;
 import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RestController;
@@ -13,22 +14,24 @@ import com.ruoyi.dashboard.project.service.DashboardProjectService;
 @RestController
 @RequestMapping("/dashboard/project")
 public class DashboardProjectController {
-    
+
     @Autowired
     private DashboardProjectService dashboardProjectService;
 
 
     // 获取每月项目数和完成数的数据
     @GetMapping("/month")
+    @PreAuthorize("@ss.hasPermi('dashboard:project:month')")
     public AjaxResult month(MonthProjectQuery query) {
         return AjaxResult.success(dashboardProjectService.selectMonthProject(query));
     }
 
     // 获取项目比率
     @GetMapping("/rate")
+    @PreAuthorize("@ss.hasPermi('dashboard:project:rate')")
     public AjaxResult rate() {
         return AjaxResult.success(dashboardProjectService.selectProjectRate());
     }
-    
+
 
 }