diff --git a/epmet-module/data-aggregator/data-aggregator-server/src/main/java/com/epmet/dataaggre/controller/GovProjectController.java b/epmet-module/data-aggregator/data-aggregator-server/src/main/java/com/epmet/dataaggre/controller/GovProjectController.java
index 3491ccfdda..8ba7cadc7d 100644
--- a/epmet-module/data-aggregator/data-aggregator-server/src/main/java/com/epmet/dataaggre/controller/GovProjectController.java
+++ b/epmet-module/data-aggregator/data-aggregator-server/src/main/java/com/epmet/dataaggre/controller/GovProjectController.java
@@ -1,6 +1,8 @@
 package com.epmet.dataaggre.controller;
 
 import com.epmet.commons.tools.annotation.LoginUser;
+import com.epmet.commons.tools.annotation.RequirePermission;
+import com.epmet.commons.tools.enums.RequirePermissionEnum;
 import com.epmet.commons.tools.security.dto.TokenDto;
 import com.epmet.commons.tools.utils.Result;
 import com.epmet.dataaggre.dto.govproject.form.AllProjectFormDTO;
@@ -12,8 +14,6 @@ import org.springframework.web.bind.annotation.RequestBody;
 import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RestController;
 
-import java.util.List;
-
 /**
  * @Author zxc
  * @DateTime 2020/12/25 上午9:45
@@ -33,6 +33,7 @@ public class GovProjectController {
 	 * @param formDTO 入参
 	 * @return com.epmet.commons.tools.utils.Result<java.util.List<com.epmet.dataaggre.dto.govproject.result.AllProjectResultDTO>>
 	 */
+	@RequirePermission(requirePermission = RequirePermissionEnum.WORK_PROJECT_TRACE_ALL)
 	@PostMapping("allprojectlist")
 	public Result<AllProjectResultDTO> allProjectList(@LoginUser TokenDto tokenDto, @RequestBody AllProjectFormDTO formDTO) {
 		AllProjectResultDTO result = govProjectService.allProjectList(tokenDto, formDTO);