diff --git a/Src/Dlhis.Basic/Device/Controllers/DevicePermissionsController.cs b/Src/Dlhis.Basic/Device/Controllers/DevicePermissionsController.cs
index 7b1ab8ce..b021c5db 100644
--- a/Src/Dlhis.Basic/Device/Controllers/DevicePermissionsController.cs
+++ b/Src/Dlhis.Basic/Device/Controllers/DevicePermissionsController.cs
@@ -9,7 +9,7 @@ using Microsoft.AspNetCore.Mvc;
 
 namespace Dlhis.Basic.Device.Controllers;
 
-[Authorize]
+[Authorize(Roles = "admin,tenant-admin")]
 [Route("api/[controller]")]
 [ApiController]
 public class DevicePermissionsController : ControllerBase
diff --git a/Src/Dlhis.Basic/Dishes/Services/Implements/DishesMenuService.cs b/Src/Dlhis.Basic/Dishes/Services/Implements/DishesMenuService.cs
index 7a97da7d..69ef56fb 100644
--- a/Src/Dlhis.Basic/Dishes/Services/Implements/DishesMenuService.cs
+++ b/Src/Dlhis.Basic/Dishes/Services/Implements/DishesMenuService.cs
@@ -37,7 +37,7 @@ public class DishesMenuService : IDishesMenuService
 
         //检验权限
         var res = await _businessPlacePermissionsService.GetMyAsync();
-        var myBps =  res.dtos.Select(x => x.Code).ToList();
+        var myBps = res.dtos.Select(x => x.Code).ToList();
 
         myBps.Contains(request.BusinessPlaceCode).ThrowIfFalse("非经营营业点,无法保存菜单");
 
@@ -68,7 +68,7 @@ public class DishesMenuService : IDishesMenuService
 
                         Type = CanteenApplicaitonTypeEnumType.Booking,
                         Version = 0,
-                        Enable = false,
+                        Enable = true,
                     };
                 });
             });