....

examcloud-core-basic-starter/src/main/java/cn/com/qmth/examcloud/core/basic/starter/config/DefaultWebMvcConfigurerAdapter.java

@@ -42,7 +42,15 @@ public class DefaultWebMvcConfigurerAdapter extends WebMvcConfigurerAdapter {
 	@Bean
 	public RequestPermissionInterceptor getRequestPermissionInterceptor() {
 		String[] exclusions = new String[]{".*login.*", ".*\\[getLoginUser\\].*",
-				RegExpUtil.escape("[${app.api.root}/org]:[/download]:[GET]")};
+				RegExpUtil.escape("[${app.api.root}/org]:[/download]:[GET]"),
+				RegExpUtil.escape("[${app.api.root}/course]:[/download]:[GET]"),
+				RegExpUtil.escape("[${app.api.root}/course]:[]:[GET]"),
+				RegExpUtil.escape("[${app.api.root}/org]:[/{id}]:[GET]"),
+				RegExpUtil.escape("[${app.api.root}/org]:[/all]:[GET]"),
+				RegExpUtil.escape("[${app.api.root}/student]:[/{id}]:[GET]"),
+				RegExpUtil.escape("[${app.api.root}/studentFaceInfo]:[/identityNumber]:[GET]"),
+				RegExpUtil.escape("[${app.api.root}/user]:[/{id}]:[GET]")};
+
 		return new RequestPermissionInterceptor(redisClient, exclusions) {
 
 			@Override