...

examcloud-core-examwork-starter/src/main/java/cn/com/qmth/examcloud/core/examwork/starter/config/DefaultWebMvcConfigurerAdapter.java

@@ -11,6 +11,7 @@ import org.springframework.context.annotation.Configuration;
 import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
 import org.springframework.web.servlet.config.annotation.WebMvcConfigurerAdapter;
 
+import cn.com.qmth.examcloud.commons.base.util.RegExpUtil;
 import cn.com.qmth.examcloud.commons.web.interceptor.FirstInterceptor;
 import cn.com.qmth.examcloud.commons.web.redis.RedisClient;
 import cn.com.qmth.examcloud.commons.web.security.RequestPermissionInterceptor;
@@ -40,7 +41,12 @@ public class DefaultWebMvcConfigurerAdapter extends WebMvcConfigurerAdapter {
 
 	@Bean
 	public RequestPermissionInterceptor getRequestPermissionInterceptor() {
-		String[] exclusions = new String[]{};
+		String[] exclusions = new String[]{RegExpUtil.escape("/exam/{id}"),
+				RegExpUtil.escape("/exam/canNotDel/{id}"),
+				RegExpUtil.escape("/exam/updateExamInfo"),
+				RegExpUtil.escape("/exam/updateExamStudent"),
+				RegExpUtil.escape("/exam/updateExamStudent"), ".*exam_student.*\\{id\\}",
+				".*exam_student.*/all.*", RegExpUtil.escape("")};
 		return new RequestPermissionInterceptor(redisClient, exclusions) {
 
 			@Override