diff --git a/epmet-user/epmet-user-server/src/main/java/com/epmet/controller/StaffPatrolController.java b/epmet-user/epmet-user-server/src/main/java/com/epmet/controller/StaffPatrolController.java
index 4948e36d7a..4d510c5996 100644
--- a/epmet-user/epmet-user-server/src/main/java/com/epmet/controller/StaffPatrolController.java
+++ b/epmet-user/epmet-user-server/src/main/java/com/epmet/controller/StaffPatrolController.java
@@ -1,6 +1,8 @@
 package com.epmet.controller;
 
 import com.epmet.commons.tools.annotation.LoginUser;
+import com.epmet.commons.tools.annotation.RequirePermission;
+import com.epmet.commons.tools.enums.RequirePermissionEnum;
 import com.epmet.commons.tools.security.dto.TokenDto;
 import com.epmet.commons.tools.utils.Result;
 import com.epmet.commons.tools.validator.ValidatorUtils;
@@ -61,6 +63,7 @@ public class StaffPatrolController {
 	 * @date 2021/6/7 16:46
 	 */
 	@PostMapping("startpatrol")
+	@RequirePermission(requirePermission = RequirePermissionEnum.WORK_GRASSROOT_GOVERN_PATROL)
 	public Result<StartPatrolResultDTO> startPatrol(@LoginUser TokenDto tokenDto, @RequestBody StartPatrolFormDTO formDTO) {
 		StartPatrolResultDTO result = staffPatrolRecordService.startPatrol(tokenDto, formDTO);
 		return new Result<StartPatrolResultDTO>().ok(result);
@@ -77,6 +80,7 @@ public class StaffPatrolController {
 	 * @date 2021/6/7 16:46
 	 */
 	@PostMapping("endpatrol")
+	@RequirePermission(requirePermission = RequirePermissionEnum.WORK_GRASSROOT_GOVERN_PATROL)
 	public Result endPatrol(@LoginUser TokenDto tokenDto, @RequestBody StartPatrolFormDTO formDTO) {
 		staffPatrolRecordService.endPatrol(tokenDto, formDTO);
 		return new Result();