diff --git a/platform-operate-api/src/main/java/com/lyms/platform/operate/web/controller/ApplyScreeningController.java b/platform-operate-api/src/main/java/com/lyms/platform/operate/web/controller/ApplyScreeningController.java
index 0fa7a43..ea2fc31 100644
--- a/platform-operate-api/src/main/java/com/lyms/platform/operate/web/controller/ApplyScreeningController.java
+++ b/platform-operate-api/src/main/java/com/lyms/platform/operate/web/controller/ApplyScreeningController.java
@@ -74,6 +74,7 @@ public class ApplyScreeningController extends BaseController {
      */
     @RequestMapping(method = RequestMethod.GET, value = "/queryMedicalInfo")
     @ResponseBody
+    @TokenRequired
     public BaseResponse queryMedicalInfo(@Valid ApplyScreeningQueryRequest screeningQueryRequest, HttpServletRequest request) {
         LoginContext loginState = (LoginContext) request.getAttribute("loginContext");
         return applyScreeningFacade.queryMedicalInfo(screeningQueryRequest,loginState.getId());
@@ -84,6 +85,7 @@ public class ApplyScreeningController extends BaseController {
      */
     @RequestMapping(method = RequestMethod.POST, value = "/saveChange")
     @ResponseBody
+    @TokenRequired
     public BaseResponse saveChange(@Valid @RequestBody PatientBaseResult patientBaseResult, HttpServletRequest request) {
         LoginContext loginState = (LoginContext) request.getAttribute("loginContext");
         return applyScreeningFacade.saveChange(patientBaseResult,loginState.getId());