diff --git a/ruoyi-admin/src/main/java/com/ruoyi/web/controller/system/SysDeptController.java b/ruoyi-admin/src/main/java/com/ruoyi/web/controller/system/SysDeptController.java
index c5539b91..0e8250d6 100644
--- a/ruoyi-admin/src/main/java/com/ruoyi/web/controller/system/SysDeptController.java
+++ b/ruoyi-admin/src/main/java/com/ruoyi/web/controller/system/SysDeptController.java
@@ -128,6 +128,19 @@ public class SysDeptController extends BaseController
         return toAjax(deptService.updateDept(dept));
     }
 
+    /**
+     * 保存部门排序
+     */
+    @Log(title = "保存部门排序", businessType = BusinessType.UPDATE)
+    @RequiresPermissions("system:dept:edit")
+    @PostMapping("/updateSort")
+    @ResponseBody
+    public AjaxResult updateSort(@RequestParam String[] deptIds, @RequestParam String[] orderNums)
+    {
+        deptService.updateDeptSort(deptIds, orderNums);
+        return success();
+    }
+
     /**
      * 删除
      */
@@ -187,15 +200,4 @@ public class SysDeptController extends BaseController
         List<Ztree> ztrees = deptService.selectDeptTreeExcludeChild(dept);
         return ztrees;
     }
-
-    /**
-     * 保存部门排序
-     */
-    @PostMapping("/updateSort")
-    @ResponseBody
-    public AjaxResult updateSort(@RequestParam String[] deptIds, @RequestParam String[] orderNums)
-    {
-        deptService.updateDeptSort(deptIds, orderNums);
-        return success();
-    }
 }
diff --git a/ruoyi-admin/src/main/java/com/ruoyi/web/controller/system/SysMenuController.java b/ruoyi-admin/src/main/java/com/ruoyi/web/controller/system/SysMenuController.java
index b86cdaa0..0d7038b1 100644
--- a/ruoyi-admin/src/main/java/com/ruoyi/web/controller/system/SysMenuController.java
+++ b/ruoyi-admin/src/main/java/com/ruoyi/web/controller/system/SysMenuController.java
@@ -147,6 +147,8 @@ public class SysMenuController extends BaseController
     /**
      * 保存菜单排序
      */
+    @Log(title = "保存菜单排序", businessType = BusinessType.UPDATE)
+    @RequiresPermissions("system:menu:edit")
     @PostMapping("/updateSort")
     @ResponseBody
     public AjaxResult updateSort(@RequestParam String[] menuIds, @RequestParam String[] orderNums)
diff --git a/ruoyi-admin/src/main/resources/templates/system/dept/dept.html b/ruoyi-admin/src/main/resources/templates/system/dept/dept.html
index 01f97f25..e222c61e 100644
--- a/ruoyi-admin/src/main/resources/templates/system/dept/dept.html
+++ b/ruoyi-admin/src/main/resources/templates/system/dept/dept.html
@@ -35,7 +35,7 @@
                 <a class="btn btn-primary" onclick="$.operate.edit()" shiro:hasPermission="system:dept:edit">
 		            <i class="fa fa-edit"></i> 修改
 		        </a>
-                <a class="btn btn-info" onclick="saveSort()">
+                <a class="btn btn-info" onclick="saveSort()" shiro:hasPermission="system:dept:edit">
                     <i class="fa fa-sort-amount-asc"></i> 保存排序
                 </a>
                 <a class="btn btn-default" id="expandAllBtn">
diff --git a/ruoyi-admin/src/main/resources/templates/system/menu/menu.html b/ruoyi-admin/src/main/resources/templates/system/menu/menu.html
index 18093cff..d370fe2e 100644
--- a/ruoyi-admin/src/main/resources/templates/system/menu/menu.html
+++ b/ruoyi-admin/src/main/resources/templates/system/menu/menu.html
@@ -35,7 +35,7 @@
                 <a class="btn btn-primary" onclick="$.operate.edit()" shiro:hasPermission="system:menu:edit">
 		            <i class="fa fa-edit"></i> 修改
 		        </a>
-		        <a class="btn btn-info" onclick="saveSort()">
+		        <a class="btn btn-info" onclick="saveSort()" shiro:hasPermission="system:menu:edit">
                     <i class="fa fa-sort-amount-asc"></i> 保存排序
                 </a>
                 <a class="btn btn-default" id="expandAllBtn">