diff --git a/src/main/java/neatlogic/module/tenant/api/DownloadI18nTranslatePropertiesApi.java b/src/main/java/neatlogic/module/tenant/api/DownloadI18nTranslatePropertiesApi.java
index f61da6ad6ba544c82820962684b7fbdae0fcbae7..6b7cd1f3e1dc2d070a0f01bbbcb894839521c3f1 100644
--- a/src/main/java/neatlogic/module/tenant/api/DownloadI18nTranslatePropertiesApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/DownloadI18nTranslatePropertiesApi.java
@@ -17,6 +17,8 @@ package neatlogic.module.tenant.api;
 
 import com.alibaba.fastjson.JSONArray;
 import com.alibaba.fastjson.JSONObject;
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.config.Config;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.restful.annotation.Description;
@@ -48,6 +50,7 @@ import java.util.Locale;
 import java.util.Map;
 
 @Service
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.SEARCH)
 public class DownloadI18nTranslatePropertiesApi extends PrivateBinaryStreamApiComponentBase {
     Logger logger = LoggerFactory.getLogger(DownloadI18nTranslatePropertiesApi.class);
diff --git a/src/main/java/neatlogic/module/tenant/api/apiaudit/ApiAuditExportApi.java b/src/main/java/neatlogic/module/tenant/api/apiaudit/ApiAuditExportApi.java
index ef795b0b79c5c6baaa2d80355cbaaca02df081fe..4f586d8b59388de79d9bb359234806c4b87c2fd2 100644
--- a/src/main/java/neatlogic/module/tenant/api/apiaudit/ApiAuditExportApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/apiaudit/ApiAuditExportApi.java
@@ -15,6 +15,8 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.*/
 
 package neatlogic.module.tenant.api.apiaudit;
 
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.restful.annotation.Description;
 import neatlogic.framework.restful.annotation.Input;
@@ -47,6 +49,7 @@ import java.nio.charset.StandardCharsets;
  */
 
 @Service
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.SEARCH)
 public class ApiAuditExportApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/file/DownloadClasspathImageApi.java b/src/main/java/neatlogic/module/tenant/api/file/DownloadClasspathImageApi.java
index f5140d83e74c9809b5c5982392abc66750217489..eaa47a051349332998fda4c3e17d5b57c2e50a8b 100644
--- a/src/main/java/neatlogic/module/tenant/api/file/DownloadClasspathImageApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/file/DownloadClasspathImageApi.java
@@ -17,6 +17,8 @@ package neatlogic.module.tenant.api.file;
 
 import com.alibaba.fastjson.JSONObject;
 import neatlogic.framework.asynchronization.threadlocal.TenantContext;
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.common.constvalue.CacheControlType;
 import neatlogic.framework.common.constvalue.systemuser.SystemUser;
@@ -39,6 +41,7 @@ import java.io.InputStream;
 
 @Service
 @AuthUser(SystemUser.ANONYMOUS)
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.SEARCH)
 public class DownloadClasspathImageApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/file/DownloadFileApi.java b/src/main/java/neatlogic/module/tenant/api/file/DownloadFileApi.java
index 5e9b7bcac322fd6ddec674d63d2ced95056baaaa..4a502012de3731914d2889df3573fc943d31fd13 100644
--- a/src/main/java/neatlogic/module/tenant/api/file/DownloadFileApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/file/DownloadFileApi.java
@@ -18,6 +18,8 @@ package neatlogic.module.tenant.api.file;
 import com.alibaba.fastjson.JSONObject;
 import neatlogic.framework.asynchronization.threadlocal.TenantContext;
 import neatlogic.framework.asynchronization.threadlocal.UserContext;
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.common.constvalue.CacheControlType;
 import neatlogic.framework.common.constvalue.systemuser.SystemUser;
@@ -48,6 +50,7 @@ import java.util.Objects;
 
 @Service
 @AuthUser(SystemUser.AUTOEXEC)
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.SEARCH)
 public class DownloadFileApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/file/DownloadImageApi.java b/src/main/java/neatlogic/module/tenant/api/file/DownloadImageApi.java
index 1b0ed62cff5e3a5f998c5dceb3f569454f883307..ea383c95f9966995facd4433d9a14cb1ec97210a 100644
--- a/src/main/java/neatlogic/module/tenant/api/file/DownloadImageApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/file/DownloadImageApi.java
@@ -16,6 +16,8 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.*/
 package neatlogic.module.tenant.api.file;
 
 import neatlogic.framework.asynchronization.threadlocal.TenantContext;
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.common.constvalue.CacheControlType;
 import neatlogic.framework.common.constvalue.systemuser.SystemUser;
@@ -41,6 +43,7 @@ import java.io.InputStream;
 
 @Service
 @AuthUser(SystemUser.ANONYMOUS)
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.SEARCH)
 public class DownloadImageApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/file/ImportFileCheckApi.java b/src/main/java/neatlogic/module/tenant/api/file/ImportFileCheckApi.java
index 5136f19f9a8f9f76fa367c7784df08b4155a13ca..00b184fe1b3a4120cc9ce967347af21ab98069e5 100644
--- a/src/main/java/neatlogic/module/tenant/api/file/ImportFileCheckApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/file/ImportFileCheckApi.java
@@ -15,6 +15,8 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.*/
 
 package neatlogic.module.tenant.api.file;
 
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.dto.ValueTextVo;
 import neatlogic.framework.exception.file.FileExtNotAllowedException;
 import neatlogic.framework.exception.file.FileNotUploadException;
@@ -48,6 +50,7 @@ import java.util.zip.ZipInputStream;
  **/
 @Service
 @Transactional
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.SEARCH)
 public class ImportFileCheckApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/file/UploadFileApi.java b/src/main/java/neatlogic/module/tenant/api/file/UploadFileApi.java
index c5b2b5397f3c867303ea16f6647e04b9da42e9ff..5d8d7fe1cbe8bd329770235313a72feb6a40dbff 100644
--- a/src/main/java/neatlogic/module/tenant/api/file/UploadFileApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/file/UploadFileApi.java
@@ -19,6 +19,8 @@ import com.alibaba.fastjson.JSONArray;
 import com.alibaba.fastjson.JSONObject;
 import neatlogic.framework.asynchronization.threadlocal.TenantContext;
 import neatlogic.framework.asynchronization.threadlocal.UserContext;
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.common.constvalue.systemuser.SystemUser;
 import neatlogic.framework.common.util.FileUtil;
@@ -47,6 +49,7 @@ import java.util.List;
 @Service
 @Transactional
 @AuthUser(SystemUser.AUTOEXEC)
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.OPERATE)
 public class UploadFileApi extends PrivateBinaryStreamApiComponentBase {
     //static Logger logger = LoggerFactory.getLogger(UploadFileApi.class);
diff --git a/src/main/java/neatlogic/module/tenant/api/file/UploadImageApi.java b/src/main/java/neatlogic/module/tenant/api/file/UploadImageApi.java
index bafad5f47650f812ee59c7eb51a336348ceebc84..e1fbb413eb4c656900f1ab109d4b7a67d811e265 100644
--- a/src/main/java/neatlogic/module/tenant/api/file/UploadImageApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/file/UploadImageApi.java
@@ -18,6 +18,8 @@ package neatlogic.module.tenant.api.file;
 import com.alibaba.fastjson.JSONObject;
 import neatlogic.framework.asynchronization.threadlocal.TenantContext;
 import neatlogic.framework.asynchronization.threadlocal.UserContext;
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.util.FileUtil;
 import neatlogic.framework.exception.user.NoTenantException;
 import neatlogic.framework.file.dao.mapper.FileMapper;
@@ -39,7 +41,7 @@ import javax.servlet.http.HttpServletResponse;
 import java.util.Objects;
 
 @Service
-
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.CREATE)
 public class UploadImageApi extends PrivateBinaryStreamApiComponentBase {
     //static Logger logger = LoggerFactory.getLogger(UploadImageApi.class);
diff --git a/src/main/java/neatlogic/module/tenant/api/form/FormExportApi.java b/src/main/java/neatlogic/module/tenant/api/form/FormExportApi.java
index 38ccbc097a3e20a851b41bfb1383e31575bb8b02..ccad58bbaf7d65031c302b0f09f58de1147e7f7d 100644
--- a/src/main/java/neatlogic/module/tenant/api/form/FormExportApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/form/FormExportApi.java
@@ -16,6 +16,8 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.*/
 package neatlogic.module.tenant.api.form;
 
 import com.alibaba.fastjson.JSONObject;
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.form.dao.mapper.FormMapper;
 import neatlogic.framework.form.dto.FormVersionVo;
@@ -41,7 +43,7 @@ import java.nio.charset.StandardCharsets;
 import java.util.List;
 
 @Service
-
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.SEARCH)
 public class FormExportApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/form/FormVersionExportApi.java b/src/main/java/neatlogic/module/tenant/api/form/FormVersionExportApi.java
index d3971108c0bc3b2322fab70be69babcd480113d5..cd8c8174248aa8e220a3a4a9034a63ca2d796790 100644
--- a/src/main/java/neatlogic/module/tenant/api/form/FormVersionExportApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/form/FormVersionExportApi.java
@@ -16,6 +16,8 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.*/
 package neatlogic.module.tenant.api.form;
 
 import com.alibaba.fastjson.JSONObject;
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.form.dao.mapper.FormMapper;
 import neatlogic.framework.form.dto.FormVersionVo;
@@ -41,7 +43,7 @@ import java.net.URLEncoder;
 import java.nio.charset.StandardCharsets;
 
 @Service
-
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.SEARCH)
 public class FormVersionExportApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/importexport/ExportApi.java b/src/main/java/neatlogic/module/tenant/api/importexport/ExportApi.java
index 822963c4b390c57d0bee1ac701b05db2d46f77fc..4eb8134fb14caccebcd1ab269315521d33ec7067 100644
--- a/src/main/java/neatlogic/module/tenant/api/importexport/ExportApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/importexport/ExportApi.java
@@ -16,6 +16,8 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.*/
 package neatlogic.module.tenant.api.importexport;
 
 import com.alibaba.fastjson.JSONObject;
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.exception.type.ParamIrregularException;
 import neatlogic.framework.importexport.core.ImportExportHandler;
@@ -41,6 +43,7 @@ import java.util.zip.ZipEntry;
 import java.util.zip.ZipOutputStream;
 
 @Component
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.UPDATE)
 public class ExportApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/importexport/ImportApi.java b/src/main/java/neatlogic/module/tenant/api/importexport/ImportApi.java
index 548098631821e35894733617f568f214b374d151..e0e5d54c1f488abbf8e7dafc587310cbba50a0d5 100644
--- a/src/main/java/neatlogic/module/tenant/api/importexport/ImportApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/importexport/ImportApi.java
@@ -16,6 +16,8 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.*/
 package neatlogic.module.tenant.api.importexport;
 
 import com.alibaba.fastjson.JSONObject;
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.exception.file.FileNotUploadException;
 import neatlogic.framework.importexport.core.ImportExportHandlerFactory;
@@ -35,6 +37,7 @@ import java.util.Map;
 
 @Component
 @Transactional
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.SEARCH)
 public class ImportApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/integration/IntegrationExportApi.java b/src/main/java/neatlogic/module/tenant/api/integration/IntegrationExportApi.java
index 7e4d6ba9b5954de10bce1be97e67c28b2150ccee..1dad29756b30b0ae7c9edfd9ef553405cc05eae9 100644
--- a/src/main/java/neatlogic/module/tenant/api/integration/IntegrationExportApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/integration/IntegrationExportApi.java
@@ -15,6 +15,8 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.*/
 
 package neatlogic.module.tenant.api.integration;
 
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.exception.integration.IntegrationNotFoundException;
 import neatlogic.framework.integration.dao.mapper.IntegrationMapper;
@@ -40,7 +42,7 @@ import java.util.zip.ZipEntry;
 import java.util.zip.ZipOutputStream;
 
 @Service
-
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.SEARCH)
 public class IntegrationExportApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/matrix/ExportMatrixApi.java b/src/main/java/neatlogic/module/tenant/api/matrix/ExportMatrixApi.java
index 49bb47ee3a61deb208da8aead753160024734fd5..3ee9fb501e79996a52e15ad787ed876d89064bf1 100644
--- a/src/main/java/neatlogic/module/tenant/api/matrix/ExportMatrixApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/matrix/ExportMatrixApi.java
@@ -16,6 +16,8 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.*/
 package neatlogic.module.tenant.api.matrix;
 
 import com.alibaba.fastjson.JSONObject;
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.matrix.core.IMatrixDataSourceHandler;
 import neatlogic.framework.matrix.core.MatrixDataSourceHandlerFactory;
@@ -42,6 +44,7 @@ import java.util.zip.ZipEntry;
 import java.util.zip.ZipOutputStream;
 
 @Component
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.SEARCH)
 public class ExportMatrixApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/matrix/ImportMatrixApi.java b/src/main/java/neatlogic/module/tenant/api/matrix/ImportMatrixApi.java
index 7c146e9004e18abd46e43d2b89635427d6ad4fe5..eb91b8eca8a5092e6e3ddfdd6895903673b9fbab 100644
--- a/src/main/java/neatlogic/module/tenant/api/matrix/ImportMatrixApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/matrix/ImportMatrixApi.java
@@ -16,6 +16,8 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.*/
 package neatlogic.module.tenant.api.matrix;
 
 import com.alibaba.fastjson.JSONObject;
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.exception.file.FileExtNotAllowedException;
 import neatlogic.framework.exception.file.FileNotUploadException;
@@ -47,6 +49,7 @@ import java.util.zip.ZipInputStream;
 
 @Component
 @Transactional
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.UPDATE)
 public class ImportMatrixApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/matrix/MatrixAttributeExportApi.java b/src/main/java/neatlogic/module/tenant/api/matrix/MatrixAttributeExportApi.java
index 4d86d8da5f1a80eb4f639ed0667655d6a9101fac..c4c798e807b8918cd3ba87cd21ab361d9c7a7534 100644
--- a/src/main/java/neatlogic/module/tenant/api/matrix/MatrixAttributeExportApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/matrix/MatrixAttributeExportApi.java
@@ -15,6 +15,8 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.*/
 
 package neatlogic.module.tenant.api.matrix;
 
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.matrix.core.IMatrixDataSourceHandler;
 import neatlogic.framework.matrix.core.MatrixDataSourceHandlerFactory;
@@ -57,7 +59,7 @@ import java.util.List;
  * @create: 2020-03-26 19:05
  **/
 @Service
-
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.SEARCH)
 public class MatrixAttributeExportApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/matrix/MatrixExportApi.java b/src/main/java/neatlogic/module/tenant/api/matrix/MatrixExportApi.java
index c4412f1867fa3b4da84d5f56be72c01d026f79e2..871db5a351339f303b0a259b8b4fbc6d77dc3409 100644
--- a/src/main/java/neatlogic/module/tenant/api/matrix/MatrixExportApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/matrix/MatrixExportApi.java
@@ -15,6 +15,8 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.*/
 
 package neatlogic.module.tenant.api.matrix;
 
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.common.constvalue.ExportFileType;
 import neatlogic.framework.matrix.core.IMatrixDataSourceHandler;
@@ -46,7 +48,7 @@ import java.io.OutputStream;
  * @create: 2020-03-26 19:04
  **/
 @Service
-
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.SEARCH)
 public class MatrixExportApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/matrix/MatrixViewXmlFileDownloadApi.java b/src/main/java/neatlogic/module/tenant/api/matrix/MatrixViewXmlFileDownloadApi.java
index 8dd1f86571b5dd89fed14956711a2af719aaffc1..538eedeee0abd65ac51fbe65904a27472605a9f1 100644
--- a/src/main/java/neatlogic/module/tenant/api/matrix/MatrixViewXmlFileDownloadApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/matrix/MatrixViewXmlFileDownloadApi.java
@@ -15,6 +15,8 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.*/
 
 package neatlogic.module.tenant.api.matrix;
 
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.matrix.dao.mapper.MatrixMapper;
 import neatlogic.framework.matrix.dto.MatrixViewVo;
@@ -40,6 +42,7 @@ import java.io.InputStream;
 import java.nio.charset.StandardCharsets;
 
 @Service
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.SEARCH)
 public class MatrixViewXmlFileDownloadApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/notify/ExportNotifyPolicyApi.java b/src/main/java/neatlogic/module/tenant/api/notify/ExportNotifyPolicyApi.java
index a0065601f5102ab0fbda7a5ad8de923902765ca8..f1a7dbfe335943b2b3bf48e5b8a710fd1e0256bb 100644
--- a/src/main/java/neatlogic/module/tenant/api/notify/ExportNotifyPolicyApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/notify/ExportNotifyPolicyApi.java
@@ -1,5 +1,7 @@
 package neatlogic.module.tenant.api.notify;
 
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.constvalue.ApiParamType;
 import neatlogic.framework.notify.core.INotifyPolicyHandler;
 import neatlogic.framework.notify.core.NotifyPolicyHandlerFactory;
@@ -23,6 +25,7 @@ import java.util.zip.ZipEntry;
 import java.util.zip.ZipOutputStream;
 
 @Component
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.SEARCH)
 public class ExportNotifyPolicyApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/notify/ImportNotifyPolicyApi.java b/src/main/java/neatlogic/module/tenant/api/notify/ImportNotifyPolicyApi.java
index 3bb7e00a0620d26f43204dcfe69ececf4f44dc78..9ebdcde65c01d8cbbfd7f82228e492892e9a0675 100644
--- a/src/main/java/neatlogic/module/tenant/api/notify/ImportNotifyPolicyApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/notify/ImportNotifyPolicyApi.java
@@ -2,6 +2,8 @@ package neatlogic.module.tenant.api.notify;
 
 import com.alibaba.fastjson.JSONObject;
 import neatlogic.framework.asynchronization.threadlocal.UserContext;
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.exception.file.FileExtNotAllowedException;
 import neatlogic.framework.exception.file.FileNotUploadException;
 import neatlogic.framework.notify.core.INotifyPolicyHandler;
@@ -33,6 +35,7 @@ import java.util.zip.ZipEntry;
 import java.util.zip.ZipInputStream;
 
 @Component
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.UPDATE)
 public class ImportNotifyPolicyApi extends PrivateBinaryStreamApiComponentBase {
 
diff --git a/src/main/java/neatlogic/module/tenant/api/user/UserAvatarUploadApi.java b/src/main/java/neatlogic/module/tenant/api/user/UserAvatarUploadApi.java
index 022324fb15bf4d597bab0e00a2cf567dc088995d..0f94a685d07ac9fc6cafecd5771fcec2bfd077e0 100644
--- a/src/main/java/neatlogic/module/tenant/api/user/UserAvatarUploadApi.java
+++ b/src/main/java/neatlogic/module/tenant/api/user/UserAvatarUploadApi.java
@@ -18,6 +18,8 @@ package neatlogic.module.tenant.api.user;
 import com.alibaba.fastjson.JSONObject;
 import neatlogic.framework.asynchronization.threadlocal.TenantContext;
 import neatlogic.framework.asynchronization.threadlocal.UserContext;
+import neatlogic.framework.auth.core.AuthAction;
+import neatlogic.framework.auth.label.NoAuth;
 import neatlogic.framework.common.util.FileUtil;
 import neatlogic.framework.dao.mapper.UserMapper;
 import neatlogic.framework.dto.UserVo;
@@ -42,7 +44,7 @@ import javax.servlet.http.HttpServletResponse;
 
 @Service
 @Transactional
-
+@AuthAction(action = NoAuth.class)
 @OperationType(type = OperationTypeEnum.OPERATE)
 public class UserAvatarUploadApi extends PrivateBinaryStreamApiComponentBase {
     //static Logger logger = LoggerFactory.getLogger(UserAvatarUploadApi.class);