diff --git a/src/api/system/account.lua b/src/api/system/account.lua
index 4673cb1..68c4a20 100644
--- a/src/api/system/account.lua
+++ b/src/api/system/account.lua
@@ -16,26 +16,31 @@ local routes = {
         paths = { "/api/system/accounts" },
         methods = { "GET" },
         handler = systemAccount.getSystemAccounts,
+        metadata = "system::accounts::list",
     },
     {
         paths = { "/api/system/accounts/:id" },
         methods = { "GET" },
         handler = systemAccount.getSystemAccount,
+        metadata = "system::accounts::view",
     },
     {
         paths = { "/api/system/accounts" },
         methods = { "POST" },
         handler = systemAccount.addSystemAccount,
+        metadata = "system::accounts::add",
     },
     {
         paths = { "/api/system/accounts/:id" },
         methods = { "DELETE" },
         handler = systemAccount.deleteSystemAccount,
+        metadata = "system::accounts::delete",
     },
     {
         paths = { "/api/system/accounts/:id" },
         methods = { "PUT" },
         handler = systemAccount.updateSystemAccount,
+        metadata = "system::accounts::edit",
     },
 }
 
diff --git a/src/api/system/application.lua b/src/api/system/application.lua
index f9c3bff..e2303cc 100644
--- a/src/api/system/application.lua
+++ b/src/api/system/application.lua
@@ -16,26 +16,31 @@ local routes = {
         paths = { "/api/system/applications" },
         methods = { "GET" },
         handler = systemApplication.getSystemApplications,
+        metadata = "system::applications::list",
     },
     {
         paths = { "/api/system/applications/:id" },
         methods = { "GET" },
         handler = systemApplication.getSystemApplication,
+        metadata = "system::applications::view",
     },
     {
         paths = { "/api/system/applications" },
         methods = { "POST" },
         handler = systemApplication.addSystemApplication,
+        metadata = "system::applications::add",
     },
     {
         paths = { "/api/system/applications/:id" },
         methods = { "DELETE" },
         handler = systemApplication.deleteSystemApplication,
+        metadata = "system::applications::delete",
     },
     {
         paths = { "/api/system/applications/:id" },
         methods = { "PUT" },
         handler = systemApplication.updateSystemApplication,
+        metadata = "system::applications::edit",
     },
 }
 
diff --git a/src/api/system/department.lua b/src/api/system/department.lua
index edbd17e..9eb268f 100644
--- a/src/api/system/department.lua
+++ b/src/api/system/department.lua
@@ -16,26 +16,31 @@ local routes = {
         paths = { "/api/system/departments" },
         methods = { "GET" },
         handler = systemDepartment.getSystemDepartments,
+        metadata = "system::departments::list",
     },
     {
         paths = { "/api/system/departments/:id" },
         methods = { "GET" },
         handler = systemDepartment.getSystemDepartment,
+        metadata = "system::departments::view",
     },
     {
         paths = { "/api/system/departments" },
         methods = { "POST" },
         handler = systemDepartment.addSystemDepartment,
+        metadata = "system::departments::add",
     },
     {
         paths = { "/api/system/departments/:id" },
         methods = { "DELETE" },
         handler = systemDepartment.deleteSystemDepartment,
+        metadata = "system::departments::delete",
     },
     {
         paths = { "/api/system/departments/:id" },
         methods = { "PUT" },
         handler = systemDepartment.updateSystemDepartment,
+        metadata = "system::departments::edit",
     },
 }
 
diff --git a/src/api/system/permission.lua b/src/api/system/permission.lua
index bfd0f00..a92585e 100644
--- a/src/api/system/permission.lua
+++ b/src/api/system/permission.lua
@@ -16,26 +16,31 @@ local routes = {
         paths = { "/api/system/permissions" },
         methods = { "GET" },
         handler = systemPermission.getSystemPermissions,
+        metadata = "system::permissions::list",
     },
     {
         paths = { "/api/system/permissions/:id" },
         methods = { "GET" },
         handler = systemPermission.getSystemPermission,
+        metadata = "system::permissions::view",
     },
     {
         paths = { "/api/system/permissions" },
         methods = { "POST" },
         handler = systemPermission.addSystemPermission,
+        metadata = "system::permissions::add",
     },
     {
         paths = { "/api/system/permissions/:id" },
         methods = { "DELETE" },
         handler = systemPermission.deleteSystemPermission,
+        metadata = "system::permissions::delete",
     },
     {
-        paths = { "/api/system/permission/:id" },
+        paths = { "/api/system/permissions/:id" },
         methods = { "PUT" },
         handler = systemPermission.updateSystemPermission,
+        metadata = "system::permissions::edit",
     },
 }
 
diff --git a/src/api/system/postion.lua b/src/api/system/postion.lua
index 7caad16..42dca38 100644
--- a/src/api/system/postion.lua
+++ b/src/api/system/postion.lua
@@ -16,26 +16,31 @@ local routes = {
         paths = { "/api/system/positions" },
         methods = { "GET" },
         handler = systemPosition.getSystemPositions,
+        metadata = "system::positions::list",
     },
     {
         paths = { "/api/system/positions/:id" },
         methods = { "GET" },
         handler = systemPosition.getSystemPosition,
+        metadata = "system::positions::list",
     },
     {
         paths = { "/api/system/positions" },
         methods = { "POST" },
         handler = systemPosition.addSystemPosition,
+        metadata = "system::positions::list",
     },
     {
         paths = { "/api/system/positions/:id" },
         methods = { "DELETE" },
         handler = systemPosition.deleteSystemPosition,
+        metadata = "system::positions::list",
     },
     {
         paths = { "/api/system/positions/:id" },
         methods = { "PUT" },
         handler = systemPosition.updateSystemPosition,
+        metadata = "system::positions::list",
     },
 }
 
diff --git a/src/api/system/role.lua b/src/api/system/role.lua
index ea115ec..002fd0e 100644
--- a/src/api/system/role.lua
+++ b/src/api/system/role.lua
@@ -16,26 +16,31 @@ local routes = {
         paths = { "/api/system/roles" },
         methods = { "GET" },
         handler = systemRole.getSystemRoles,
+        metadata = "system::roles::list",
     },
     {
         paths = { "/api/system/roles/:id" },
         methods = { "GET" },
         handler = systemRole.getSystemRole,
+        metadata = "system::roles::view",
     },
     {
         paths = { "/api/system/roles" },
         methods = { "POST" },
         handler = systemRole.addSystemRole,
+        metadata = "system::roles::add",
     },
     {
         paths = { "/api/system/roles/:id" },
         methods = { "DELETE" },
         handler = systemRole.deleteSystemRole,
+        metadata = "system::roles::delete",
     },
     {
         paths = { "/api/system/roles/:id" },
         methods = { "PUT" },
         handler = systemRole.updateSystemRole,
+        metadata = "system::roles::edit",
     },
 }
 
diff --git a/src/api/system/user.lua b/src/api/system/user.lua
index 444cdee..7cc3eb0 100644
--- a/src/api/system/user.lua
+++ b/src/api/system/user.lua
@@ -15,26 +15,31 @@ local routes = {
         paths = { "/api/system/users" },
         methods = { "GET" },
         handler = systemUser.getSystemUsers,
+        metadata = "system::users::list",
     },
     {
         paths = { "/api/system/users/:id" },
         methods = { "GET" },
         handler = systemUser.getSystemUser,
+        metadata = "system::users::view",
     },
     {
         paths = { "/api/system/users" },
         methods = { "POST" },
         handler = systemUser.addSystemUser,
+        metadata = "system::users::add",
     },
     {
         paths = { "/api/system/users/:id" },
         methods = { "DELETE" },
         handler = systemUser.deleteSystemUser,
+        metadata = "system::users::delete",
     },
     {
         paths = { "/api/system/users/:id" },
         methods = { "PUT" },
         handler = systemUser.updateSystemUser,
+        metadata = "system::users::edit",
     },
 }
 
diff --git a/src/auth/jwt-auth.lua b/src/auth/jwt-auth.lua
index a91a2aa..9e0b18f 100644
--- a/src/auth/jwt-auth.lua
+++ b/src/auth/jwt-auth.lua
@@ -48,5 +48,10 @@ if jwt_obj.payload.exp and ngx.time() > jwt_obj.payload.exp then
     ngx.exit(ngx.HTTP_UNAUTHORIZED)
 end
 
+-- Access claims in the payload
+local claims = verified.claims
+-- write the uid variable
+ngx.var.uid = jwt_obj.payload
+
 --全部校验完成后，说明令牌有效，返回令牌数据
 ngx.log(ngx.INFO, "令牌校验通过 JWT: " .. cjson.encode(jwt_obj))
\ No newline at end of file
diff --git a/src/config.lua b/src/config.lua
index 396f101..5d71edf 100644
--- a/src/config.lua
+++ b/src/config.lua
@@ -2,7 +2,7 @@
 --- Generated by EmmyLua(https://github.com/EmmyLua)
 --- Created by admin.
 --- DateTime: 2025/9/24 16:31
----
+--- 配置文件配置信息
 
 SYSTEM_CONFIG = {
     APP_ENV = "dev", -- dev/prod
diff --git a/src/service/auth/auth.lua b/src/service/auth/auth.lua
index 65baf00..0e712a5 100644
--- a/src/service/auth/auth.lua
+++ b/src/service/auth/auth.lua
@@ -95,7 +95,8 @@ function _M.logout()
     --验证成功记录登出的日志信息
     local userid = ret["body"]["payload"]["userid"]
     local username = ret["body"]["payload"]["username"]
-    ngx.log(ngx.INFO, "userid:"..userid.." username:"..username.." logout system")
+    local rolename = ret["body"]["payload"]["username"]
+    ngx.log(ngx.INFO, "userid:"..userid.." username:"..username.." rolename:"..rolename.." logout system")
     local result = resp:json(0, "用户退出系统成功")
     resp:send(result)
 end
diff --git a/src/service/system/user.lua b/src/service/system/user.lua
index a3e1434..aca8aa9 100644
--- a/src/service/system/user.lua
+++ b/src/service/system/user.lua
@@ -23,8 +23,15 @@ local function getUserId()
     return userid
 end
 
+--判断用户是都有权限使用接口
+--local payload = ngx.var.uid
+
 --获取所有用户信息
-function _M.getSystemUsers()
+function _M.getSystemUsers(m)
+    --获取登录的用户信息
+    local payload = ngx.var.uid
+    local metadata = m.metadata
+    ngx.log(ngx.INFO, "metadata value:"..metadata)
     --获取页码和请求的数据量
     --local args = ngx.req.get_uri_args()
     local pageNum = ngx.var.pagenum or 1
@@ -36,6 +43,11 @@ end
 
 --根据用户id获取用户信息
 function _M.getSystemUser(m)
+    --获取登录的用户信息
+    local payload = ngx.var.uid
+    local metadata = m.metadata
+    ngx.log(ngx.INFO, "metadata value:"..metadata)
+
     local userid = getUserId()
     if userid ~= m.id then
         ngx.log(ngx.WARN, "用户与使用token中的用户id不一致")
@@ -48,7 +60,7 @@ function _M.getSystemUser(m)
 end
 
 --根据用户id获取用户信息
-function _M.addSystemUser()
+function _M.addSystemUser(m)
     --读取请求体的数据
     ngx.req.read_body()
     --获取请求数据