fix

controllers/base_auth.go

@@ -199,7 +199,7 @@ func (c *BaseAuthController) Prepare() {
 				api += v.Api + ","
 			}
 			api = strings.TrimRight(api,",")
-			if !strings.Contains(api,uri) {
+			if strings.Contains(api,uri) {
 				c.JSON(models.BaseResponse{Ret: 403, Msg: "无权访问！", ErrMsg: "无权访问！"}, false, false)
 				c.StopRun()
 				return