diff --git a/frameworks/js/napi/accesstoken/src/napi_request_global_switch_on_setting.cpp b/frameworks/js/napi/accesstoken/src/napi_request_global_switch_on_setting.cpp
index a4b58f785a13a24a7ad582d0725d2720336e3828..329392fafd72c439276e69ece7d9995dc16d28b0 100644
--- a/frameworks/js/napi/accesstoken/src/napi_request_global_switch_on_setting.cpp
+++ b/frameworks/js/napi/accesstoken/src/napi_request_global_switch_on_setting.cpp
@@ -535,7 +535,7 @@ bool NapiRequestGlobalSwitch::ParseRequestGlobalSwitch(const napi_env& env,
         LOGE(ATM_DOMAIN, ATM_TAG, "Napi_get_cb_info failed");
         return false;
     }
-    if (argc < NapiContextCommon::MAX_PARAMS_TWO - 1) {
+    if (argc < NapiContextCommon::MAX_PARAMS_TWO) {
         NAPI_CALL_BASE(env, napi_throw(env, GenerateBusinessError(env,
             JsErrorCode::JS_ERROR_PARAM_ILLEGAL, "Parameter is missing.")), false);
         return false;
diff --git a/services/accesstokenmanager/main/cpp/src/permission/permission_manager.cpp b/services/accesstokenmanager/main/cpp/src/permission/permission_manager.cpp
index 232ad3a51c309685e302400b740bd2f579464221..17a7a9711345b589e4392964c9e22837284e9e78 100644
--- a/services/accesstokenmanager/main/cpp/src/permission/permission_manager.cpp
+++ b/services/accesstokenmanager/main/cpp/src/permission/permission_manager.cpp
@@ -442,7 +442,7 @@ int32_t PermissionManager::UpdateMultiTokenPermissionState(const std::shared_ptr
         isUpdateSuccess = true;
 
         uint32_t newFlag = flag;
-        if (GetPermissionFlag(tokenID, permissionName, flag) == RET_SUCCESS) {
+        if (GetPermissionFlag(tokenID, permissionName, newFlag) == RET_SUCCESS) {
             flag = newFlag;
         }
         (void)HiSysEventWrite(HiviewDFX::HiSysEvent::Domain::ACCESS_TOKEN, "UPDATE_PERMISSION",
@@ -677,7 +677,7 @@ int32_t PermissionManager::CheckAndUpdatePermissionInner(AccessTokenID tokenID,
     int32_t ret = CheckAndUpdatePermission(tokenID, permissionName, isGranted, flag);
 
     uint32_t newFlag = flag;
-    if (ret == RET_SUCCESS && GetPermissionFlag(tokenID, permissionName, flag) == RET_SUCCESS) {
+    if (ret == RET_SUCCESS && GetPermissionFlag(tokenID, permissionName, newFlag) == RET_SUCCESS) {
         flag = newFlag;
     }