diff --git a/lib/routes/routes.go b/lib/routes/routes.go
index 37798bbb..b3f5d3dc 100644
--- a/lib/routes/routes.go
+++ b/lib/routes/routes.go
@@ -71,49 +71,43 @@ func init() {
 	Register("GET", sm.UriOMCLocalTime, sm.GetOMCLocalTime, nil)
 	Register("GET", sm.CustomUriOMCLocalTime, sm.GetOMCLocalTime, nil)
 
-	// 数据库直连操作权限
-	selectPermission := midware.Authorize(map[string][]string{})
-	updatePermission := midware.Authorize(map[string][]string{})
-	insertPermission := midware.Authorize(map[string][]string{})
-	deletePermission := midware.Authorize(map[string][]string{})
-
 	// database management
-	Register("GET", dbrest.XormGetDataUri, dbrest.DatabaseGetData, selectPermission)
-	Register("GET", dbrest.XormSelectDataUri, dbrest.DatabaseGetData, selectPermission)
-	Register("POST", dbrest.XormInsertDataUri, dbrest.DatabaseInsertData, insertPermission)
-	Register("PUT", dbrest.XormUpdateDataUri, dbrest.DatabaseUpdateData, updatePermission)
-	Register("DELETE", dbrest.XormDeleteDataUri, dbrest.DatabaseDeleteData, deletePermission)
+	Register("GET", dbrest.XormGetDataUri, dbrest.DatabaseGetData, nil)
+	Register("GET", dbrest.XormSelectDataUri, dbrest.DatabaseGetData, nil)
+	Register("POST", dbrest.XormInsertDataUri, dbrest.DatabaseInsertData, nil)
+	Register("PUT", dbrest.XormUpdateDataUri, dbrest.DatabaseUpdateData, nil)
+	Register("DELETE", dbrest.XormDeleteDataUri, dbrest.DatabaseDeleteData, nil)
 
-	Register("GET", dbrest.CustomXormGetDataUri, dbrest.DatabaseGetData, selectPermission)
-	Register("GET", dbrest.CustomXormSelectDataUri, dbrest.DatabaseGetData, selectPermission)
-	Register("POST", dbrest.CustomXormInsertDataUri, dbrest.DatabaseInsertData, insertPermission)
-	Register("PUT", dbrest.CustomXormUpdateDataUri, dbrest.DatabaseUpdateData, updatePermission)
-	Register("DELETE", dbrest.CustomXormDeleteDataUri, dbrest.DatabaseDeleteData, deletePermission)
+	Register("GET", dbrest.CustomXormGetDataUri, dbrest.DatabaseGetData, nil)
+	Register("GET", dbrest.CustomXormSelectDataUri, dbrest.DatabaseGetData, nil)
+	Register("POST", dbrest.CustomXormInsertDataUri, dbrest.DatabaseInsertData, nil)
+	Register("PUT", dbrest.CustomXormUpdateDataUri, dbrest.DatabaseUpdateData, nil)
+	Register("DELETE", dbrest.CustomXormDeleteDataUri, dbrest.DatabaseDeleteData, nil)
 
-	Register("GET", dbrest.XormCommonUri, dbrest.DatabaseGetData, selectPermission)
-	Register("POST", dbrest.XormCommonUri, dbrest.DatabaseInsertData, insertPermission)
-	Register("PUT", dbrest.XormCommonUri, dbrest.DatabaseUpdateData, updatePermission)
-	Register("DELETE", dbrest.XormCommonUri, dbrest.DatabaseDeleteData, deletePermission)
+	Register("GET", dbrest.XormCommonUri, dbrest.DatabaseGetData, nil)
+	Register("POST", dbrest.XormCommonUri, dbrest.DatabaseInsertData, nil)
+	Register("PUT", dbrest.XormCommonUri, dbrest.DatabaseUpdateData, nil)
+	Register("DELETE", dbrest.XormCommonUri, dbrest.DatabaseDeleteData, nil)
 
-	Register("GET", dbrest.XormDatabaseUri, dbrest.TaskDatabaseGetData, selectPermission)
-	Register("POST", dbrest.XormDatabaseUri, dbrest.TaskDatabaseInsertData, insertPermission)
-	Register("PUT", dbrest.XormDatabaseUri, dbrest.TaskDatabaseUpdateData, updatePermission)
-	Register("DELETE", dbrest.XormDatabaseUri, dbrest.TaskDatabaseDeleteData, deletePermission)
+	Register("GET", dbrest.XormDatabaseUri, dbrest.TaskDatabaseGetData, nil)
+	Register("POST", dbrest.XormDatabaseUri, dbrest.TaskDatabaseInsertData, nil)
+	Register("PUT", dbrest.XormDatabaseUri, dbrest.TaskDatabaseUpdateData, nil)
+	Register("DELETE", dbrest.XormDatabaseUri, dbrest.TaskDatabaseDeleteData, nil)
 
-	Register("GET", dbrest.CustomXormCommonUri, dbrest.DatabaseGetData, selectPermission)
-	Register("POST", dbrest.CustomXormCommonUri, dbrest.DatabaseInsertData, insertPermission)
-	Register("PUT", dbrest.CustomXormCommonUri, dbrest.DatabaseUpdateData, updatePermission)
-	Register("DELETE", dbrest.CustomXormCommonUri, dbrest.DatabaseDeleteData, deletePermission)
+	Register("GET", dbrest.CustomXormCommonUri, dbrest.DatabaseGetData, nil)
+	Register("POST", dbrest.CustomXormCommonUri, dbrest.DatabaseInsertData, nil)
+	Register("PUT", dbrest.CustomXormCommonUri, dbrest.DatabaseUpdateData, nil)
+	Register("DELETE", dbrest.CustomXormCommonUri, dbrest.DatabaseDeleteData, nil)
 
-	Register("GET", dbrest.XormExtDataUri, dbrest.ExtDatabaseGetData, selectPermission)
-	Register("POST", dbrest.XormExtDataUri, dbrest.ExtDatabaseInsertData, insertPermission)
-	Register("PUT", dbrest.XormExtDataUri, dbrest.ExtDatabaseUpdateData, updatePermission)
-	Register("DELETE", dbrest.XormExtDataUri, dbrest.ExtDatabaseDeleteData, deletePermission)
+	Register("GET", dbrest.XormExtDataUri, dbrest.ExtDatabaseGetData, nil)
+	Register("POST", dbrest.XormExtDataUri, dbrest.ExtDatabaseInsertData, nil)
+	Register("PUT", dbrest.XormExtDataUri, dbrest.ExtDatabaseUpdateData, nil)
+	Register("DELETE", dbrest.XormExtDataUri, dbrest.ExtDatabaseDeleteData, nil)
 
-	Register("GET", dbrest.CustomXormExtDataUri, dbrest.ExtDatabaseGetData, selectPermission)
-	Register("POST", dbrest.CustomXormExtDataUri, dbrest.ExtDatabaseInsertData, insertPermission)
-	Register("PUT", dbrest.CustomXormExtDataUri, dbrest.ExtDatabaseUpdateData, updatePermission)
-	Register("DELETE", dbrest.CustomXormExtDataUri, dbrest.ExtDatabaseDeleteData, deletePermission)
+	Register("GET", dbrest.CustomXormExtDataUri, dbrest.ExtDatabaseGetData, nil)
+	Register("POST", dbrest.CustomXormExtDataUri, dbrest.ExtDatabaseInsertData, nil)
+	Register("PUT", dbrest.CustomXormExtDataUri, dbrest.ExtDatabaseUpdateData, nil)
+	Register("DELETE", dbrest.CustomXormExtDataUri, dbrest.ExtDatabaseDeleteData, nil)
 
 	// alarm restful Register
 	Register("POST", fm.UriAlarms, fm.PostAlarmFromNF, midware.LogOperate(collectlogs.OptionNew("Alarm", collectlogs.BUSINESS_TYPE_UPDATE)))