diff --git a/common/middleware/settings.go b/common/middleware/settings.go
index b333f4802..daf8d3058 100644
--- a/common/middleware/settings.go
+++ b/common/middleware/settings.go
@@ -38,4 +38,6 @@ var CasbinExclude = []UrlInfo{
 	{Url: "/", Method: "GET"},
 	{Url: "/api/v1/server-monitor", Method: "GET"},
 	{Url: "/api/v1/public/uploadFile", Method: "POST"},
+        {Url: "/api/v1/user/pwd/set", Method: "PUT"},
+	{Url: "/api/v1/sys-user", Method: "PUT"},
 }