diff --git a/yudao-module-mall/yudao-module-shop-biz/src/main/java/cn/iocoder/yudao/module/shop/controller/admin/product/StoreProductController.java b/yudao-module-mall/yudao-module-shop-biz/src/main/java/cn/iocoder/yudao/module/shop/controller/admin/product/StoreProductController.java
index ee8b57293..f47d25f78 100644
--- a/yudao-module-mall/yudao-module-shop-biz/src/main/java/cn/iocoder/yudao/module/shop/controller/admin/product/StoreProductController.java
+++ b/yudao-module-mall/yudao-module-shop-biz/src/main/java/cn/iocoder/yudao/module/shop/controller/admin/product/StoreProductController.java
@@ -52,7 +52,7 @@ public class StoreProductController {
      * @param request 搜索条件
      * @param pageParamRequest 分页参数
      */
-//    @PreAuthorize("@ss.hasPermission('admin:product:list')")
+    @PreAuthorize("@ss.hasPermission('admin:product:list')")
     @Operation(summary = "分页列表") //配合swagger使用
     @RequestMapping(value = "/list", method = RequestMethod.GET)
     public CommonResult<PageInfo<StoreProductResponse>> getList(@Validated StoreProductSearchRequest request,
@@ -64,7 +64,7 @@ public class StoreProductController {
      * 新增商品
      * @param request 新增参数
      */
-//    @PreAuthorize("@ss.hasPermission('admin:product:save')")
+    @PreAuthorize("@ss.hasPermission('admin:product:save')")
     @Operation(summary = "新增商品")
     @RequestMapping(value = "/save", method = RequestMethod.POST)
     public CommonResult<Boolean> save(@RequestBody @Validated StoreProductAddRequest request) {
@@ -79,7 +79,7 @@ public class StoreProductController {
      * 删除商品表
      * @param id Integer
      */
-//    @PreAuthorize("@ss.hasPermission('admin:product:delete')")
+    @PreAuthorize("@ss.hasPermission('admin:product:delete')")
     @Operation(summary = "删除")
     @RequestMapping(value = "/delete/{id}", method = RequestMethod.GET)
     public CommonResult<Boolean> delete(@RequestBody @PathVariable Integer id, @RequestParam(value = "type", required = false, defaultValue = "recycle")String type) {
@@ -99,7 +99,7 @@ public class StoreProductController {
      * 恢复已删除商品表
      * @param id Integer
      */
-//    @PreAuthorize("@ss.hasPermission('admin:product:restore')")
+    @PreAuthorize("@ss.hasPermission('admin:product:restore')")
     @Operation(summary = "恢复商品")
     @RequestMapping(value = "/restore/{id}", method = RequestMethod.GET)
     public CommonResult<Boolean> restore(@RequestBody @PathVariable Integer id) {
@@ -114,7 +114,7 @@ public class StoreProductController {
      * 商品修改
      * @param storeProductRequest 商品参数
      */
-//    @PreAuthorize("@ss.hasPermission('admin:product:update')")
+    @PreAuthorize("@ss.hasPermission('admin:product:update')")
     @Operation(summary = "商品修改")
     @RequestMapping(value = "/update", method = RequestMethod.POST)
     public CommonResult<Boolean> update(@RequestBody @Validated StoreProductAddRequest storeProductRequest) {
@@ -129,7 +129,7 @@ public class StoreProductController {
      * 商品详情
      * @param id 商品id
      */
-//    @PreAuthorize("@ss.hasPermission('admin:product:info')")
+    @PreAuthorize("@ss.hasPermission('admin:product:info')")
     @Operation(summary = "商品详情")
     @RequestMapping(value = "/info/{id}", method = RequestMethod.GET)
     public CommonResult<StoreProductInfoResponse> info(@PathVariable Integer id) {
@@ -139,7 +139,7 @@ public class StoreProductController {
     /**
      * 商品tabs表头数据
      */
-//    @PreAuthorize("@ss.hasPermission('admin:product:tabs:headers')")
+    @PreAuthorize("@ss.hasPermission('admin:product:tabs:headers')")
    @Operation(summary = "商品表头数量")
    @RequestMapping(value = "/tabs/headers", method = RequestMethod.GET)
    public CommonResult<List<StoreProductTabsHeader>> getTabsHeader() {
@@ -149,7 +149,7 @@ public class StoreProductController {
     /**
      * 上架
      */
-//    @PreAuthorize("@ss.hasPermission('admin:product:up')")
+    @PreAuthorize("@ss.hasPermission('admin:product:up')")
     @Operation(summary = "上架")
     @RequestMapping(value = "/putOnShell/{id}", method = RequestMethod.GET)
     public CommonResult<Boolean> putOn(@PathVariable Integer id) {
@@ -163,7 +163,7 @@ public class StoreProductController {
     /**
      * 下架
      */
-//    @PreAuthorize("@ss.hasPermission('admin:product:down')")
+    @PreAuthorize("@ss.hasPermission('admin:product:down')")
     @Operation(summary = "下架")
     @RequestMapping(value = "/offShell/{id}", method = RequestMethod.GET)
     public CommonResult<Boolean> offShell(@PathVariable Integer id) {