diff --git a/ShadowEditor.Server/Base/ApiAuthAttribute.cs b/ShadowEditor.Server/Base/ApiAuthAttribute.cs
index 3f0ce770..f99a0d81 100644
--- a/ShadowEditor.Server/Base/ApiAuthAttribute.cs
+++ b/ShadowEditor.Server/Base/ApiAuthAttribute.cs
@@ -62,7 +62,7 @@ namespace ShadowEditor.Server.Base
                 return;
             }
 
-            var loginAttribute = attributes.Find(n => n.Authority == "Login"); // 具有Login权限的接口，所有登录用户都能使用
+            var loginAttribute = attributes.Find(n => n.Authority == "LOGIN"); // 具有Login权限的接口，所有登录用户都能使用
 
             if (loginAttribute != null)
             {
diff --git a/ShadowEditor.Web/Web.config b/ShadowEditor.Web/Web.config
index 227cd460..47684523 100644
--- a/ShadowEditor.Web/Web.config
+++ b/ShadowEditor.Web/Web.config
@@ -15,7 +15,7 @@
     <add key="mongo_dbName" value="ShadowEditor" />
 
     <!-- 是否开启权限管理，true: 开启, false: 关闭 -->
-    <add key="EnableAuthority" value="false" />
+    <add key="EnableAuthority" value="true" />
 
     <!-- 登录时长设置，分钟，只允许整数。 -->
     <add key="Expires" value="120" />
diff --git a/ShadowEditor.Web/src/editor/assets/AnimationPanel.jsx b/ShadowEditor.Web/src/editor/assets/AnimationPanel.jsx
index 2877a6f0..7327defe 100644
--- a/ShadowEditor.Web/src/editor/assets/AnimationPanel.jsx
+++ b/ShadowEditor.Web/src/editor/assets/AnimationPanel.jsx
@@ -28,6 +28,7 @@ class AnimationPanel extends React.Component {
     render() {
         const { className, style } = this.props;
         const { data, categoryData, name, categories } = this.state;
+        const { enableAuthority, authorities } = app.server;
 
         let list = data;
 
@@ -61,7 +62,7 @@ class AnimationPanel extends React.Component {
             <SearchField
                 data={categoryData}
                 placeholder={_t('Search Content')}
-                showAddButton
+                showAddButton={!enableAuthority || authorities.includes('ADD_ANIMATION')}
                 showFilterButton
                 onAdd={this.handleAdd}
                 onInput={this.handleSearch.bind(this)}