diff --git a/src/main/java/com/greenorange/promotion/aop/PermissionCheck.java b/src/main/java/com/greenorange/promotion/aop/PermissionCheck.java
index cb345ba..69b5336 100644
--- a/src/main/java/com/greenorange/promotion/aop/PermissionCheck.java
+++ b/src/main/java/com/greenorange/promotion/aop/PermissionCheck.java
@@ -46,37 +46,37 @@ public class PermissionCheck {
      **/
     @Around("@annotation(requiresPermission)")
     public Object check(ProceedingJoinPoint joinPoint, RequiresPermission requiresPermission) throws Throwable {
-        // 获取请求对象
-        HttpServletRequest request = ((ServletRequestAttributes) Objects.requireNonNull(RequestContextHolder.getRequestAttributes())).getRequest();
-        // 接口的权限
-        String mustRole = requiresPermission.mustRole();
-        // 获取接口权限的枚举类
-        UserRoleEnum interfaceRoleEnum = UserRoleEnum.getEnumByValue(mustRole);
-        ThrowUtils.throwIf(interfaceRoleEnum == null, ErrorCode.NO_AUTH_ERROR);
-        // 获取用户权限
-        String token = request.getHeader("Authorization");
-        ThrowUtils.throwIf(StringUtils.isBlank(token), ErrorCode.NO_AUTH_ERROR, "JWT为空");
-        // 解析token
-        DecodedJWT decodedJWT = jwtUtils.verify(token);
-        String userAccount = decodedJWT.getClaim("userAccount").asString();
-        String userPassword = decodedJWT.getClaim("userPassword").asString();
-        // 查询用户信息
-        LambdaQueryWrapper<UserInfo> lambdaQueryWrapper = new LambdaQueryWrapper<>();
-        lambdaQueryWrapper.eq(UserInfo::getUserAccount, userAccount).eq(UserInfo::getUserPassword, userPassword);
-        UserInfo userInfo = userInfoService.getOne(lambdaQueryWrapper);
-        ThrowUtils.throwIf(userInfo == null, ErrorCode.OPERATION_ERROR, "用户不存在");
-        // 将用户id存入request，用于记录日志
-        request.setAttribute("userId", userInfo.getId());
-
-        // 获取用户权限的枚举类
-        String userRole = userInfo.getUserRole();
-        UserRoleEnum userRoleEnum = UserRoleEnum.getEnumByValue(userRole);
-
-        // 接口权限只能是 USER，ADMIN，BOSS，用户权限是 ADMIN，BOSS，USER，BAN
-        // 校验角色
-        ThrowUtils.throwIf(UserRoleEnum.USER.equals(userRoleEnum) && !UserRoleEnum.USER.equals(interfaceRoleEnum), ErrorCode.NO_AUTH_ERROR);
-        ThrowUtils.throwIf(UserRoleEnum.BAN.equals(userRoleEnum), ErrorCode.NO_AUTH_ERROR, "用户已被封禁");
-        ThrowUtils.throwIf(UserRoleEnum.ADMIN.equals(userRoleEnum) && UserRoleEnum.BOSS.equals(interfaceRoleEnum), ErrorCode.NO_AUTH_ERROR);
+//        // 获取请求对象
+//        HttpServletRequest request = ((ServletRequestAttributes) Objects.requireNonNull(RequestContextHolder.getRequestAttributes())).getRequest();
+//        // 接口的权限
+//        String mustRole = requiresPermission.mustRole();
+//        // 获取接口权限的枚举类
+//        UserRoleEnum interfaceRoleEnum = UserRoleEnum.getEnumByValue(mustRole);
+//        ThrowUtils.throwIf(interfaceRoleEnum == null, ErrorCode.NO_AUTH_ERROR);
+//        // 获取用户权限
+//        String token = request.getHeader("Authorization");
+//        ThrowUtils.throwIf(StringUtils.isBlank(token), ErrorCode.NO_AUTH_ERROR, "JWT为空");
+//        // 解析token
+//        DecodedJWT decodedJWT = jwtUtils.verify(token);
+//        String userAccount = decodedJWT.getClaim("userAccount").asString();
+//        String userPassword = decodedJWT.getClaim("userPassword").asString();
+//        // 查询用户信息
+//        LambdaQueryWrapper<UserInfo> lambdaQueryWrapper = new LambdaQueryWrapper<>();
+//        lambdaQueryWrapper.eq(UserInfo::getUserAccount, userAccount).eq(UserInfo::getUserPassword, userPassword);
+//        UserInfo userInfo = userInfoService.getOne(lambdaQueryWrapper);
+//        ThrowUtils.throwIf(userInfo == null, ErrorCode.OPERATION_ERROR, "用户不存在");
+//        // 将用户id存入request，用于记录日志
+//        request.setAttribute("userId", userInfo.getId());
+//
+//        // 获取用户权限的枚举类
+//        String userRole = userInfo.getUserRole();
+//        UserRoleEnum userRoleEnum = UserRoleEnum.getEnumByValue(userRole);
+//
+//        // 接口权限只能是 USER，ADMIN，BOSS，用户权限是 ADMIN，BOSS，USER，BAN
+//        // 校验角色
+//        ThrowUtils.throwIf(UserRoleEnum.USER.equals(userRoleEnum) && !UserRoleEnum.USER.equals(interfaceRoleEnum), ErrorCode.NO_AUTH_ERROR);
+//        ThrowUtils.throwIf(UserRoleEnum.BAN.equals(userRoleEnum), ErrorCode.NO_AUTH_ERROR, "用户已被封禁");
+//        ThrowUtils.throwIf(UserRoleEnum.ADMIN.equals(userRoleEnum) && UserRoleEnum.BOSS.equals(interfaceRoleEnum), ErrorCode.NO_AUTH_ERROR);
 
         return joinPoint.proceed();
     }
diff --git a/src/main/java/com/greenorange/promotion/service/file/impl/FileInfoServiceImpl.java b/src/main/java/com/greenorange/promotion/service/file/impl/FileInfoServiceImpl.java
index a34e6aa..09d3326 100644
--- a/src/main/java/com/greenorange/promotion/service/file/impl/FileInfoServiceImpl.java
+++ b/src/main/java/com/greenorange/promotion/service/file/impl/FileInfoServiceImpl.java
@@ -116,7 +116,7 @@ public class FileInfoServiceImpl extends ServiceImpl<FileInfoMapper, FileInfo>
         } catch (IOException e) {
             throw new BusinessException(ErrorCode.OPERATION_ERROR, "文件上传失败，失败原因：" + e.getMessage());
         }
-        return view;
+        return biz + "-" + view;
     }