Index: ssts-web/src/main/webapp/WEB-INF/spring/security-standard/applicationContext-acegi-security.xml
===================================================================
diff -u -r35405 -r37079
--- ssts-web/src/main/webapp/WEB-INF/spring/security-standard/applicationContext-acegi-security.xml	(.../applicationContext-acegi-security.xml)	(revision 35405)
+++ ssts-web/src/main/webapp/WEB-INF/spring/security-standard/applicationContext-acegi-security.xml	(.../applicationContext-acegi-security.xml)	(revision 37079)
@@ -56,7 +56,6 @@
 			<intercept-url pattern="/logonSSOForSszxyy.jsp" access="permitAll"></intercept-url>
 			<intercept-url pattern="/debug/**" access="permitAll"></intercept-url>
 			<intercept-url pattern="/buttjoint/**" access="permitAll"></intercept-url>
-			<intercept-url pattern="/ext-4.2.3/**" access="permitAll"></intercept-url>
 			<intercept-url pattern="/disinfectsystem/qualitymonitoringWithNoLogon/**" access="permitAll"></intercept-url>
 			<intercept-url pattern="/disinfectsystem/config/**" access="permitAll"></intercept-url>
 			<intercept-url pattern="/disinfectsystem/common/**" access="permitAll"></intercept-url>
@@ -72,7 +71,7 @@
 			<intercept-url pattern="/jquery/**" access="permitAll"></intercept-url>
 			<intercept-url pattern="/ext/**" access="permitAll"></intercept-url>
 			<intercept-url pattern="/ext-4.2.3/**" access="permitAll"></intercept-url>
-			<!-- <intercept-url pattern="/dwr/**" access="permitAll"></intercept-url> -->
+			<intercept-url pattern="/dwr/**" access="permitAll"></intercept-url>
 			<intercept-url pattern="/images/**" access="permitAll"></intercept-url>
 			<intercept-url pattern="/styles/**" access="permitAll"></intercept-url>
 			<intercept-url pattern="/scripts/**" access="permitAll"></intercept-url>
@@ -91,7 +90,8 @@
 			<intercept-url pattern="/jasperreports/jasperreportsAction!getEquipmentData.do" access="permitAll"></intercept-url>
 			<intercept-url pattern="/jasperreports/jasperreportsAction!getRealTimeBulletinBoardWorkloadData.do" access="permitAll"></intercept-url>
 			<intercept-url pattern="/disinfectsystem/operationReservationAction!findTodayOperationReservatonAmount.do" access="permitAll"></intercept-url>
-
+			<intercept-url pattern="/disinfectSystem/baseData/specialInfectionAction!loadEnableSpecialInfectionList.do" access="permitAll"></intercept-url>
+			<intercept-url pattern="/disinfectsystem/basedatamanager/operationOrgAction!findOrgUnitOperationName.do" access="permitAll"></intercept-url>
 			<!--  user is not an anonymous or a remember-me user -->
 			<intercept-url pattern="/**" access="isFullyAuthenticated()"></intercept-url>
 			<form-login login-page="/logon.jsp" always-use-default-target="true" default-target-url="/openSystemMainPage.jsp" authentication-failure-url="/logon.jsp?login_error=1"></form-login>
Index: ssts-web/src/main/webapp/WEB-INF/spring/applicationContext-acegi-security.xml
===================================================================
diff -u -r37077 -r37079
--- ssts-web/src/main/webapp/WEB-INF/spring/applicationContext-acegi-security.xml	(.../applicationContext-acegi-security.xml)	(revision 37077)
+++ ssts-web/src/main/webapp/WEB-INF/spring/applicationContext-acegi-security.xml	(.../applicationContext-acegi-security.xml)	(revision 37079)
@@ -67,11 +67,9 @@
 			<intercept-url pattern="/HIP/**" access="permitAll"></intercept-url>
 			<intercept-url pattern="/mobileClient/**" access="permitAll"></intercept-url>
 			<intercept-url pattern="/disinfectSystem/sterilization/sterilizationRecordAction!uploadSterilizationRecordPic.do" access="permitAll"></intercept-url>
-			<intercept-url pattern="/disinfectSystem/baseData/specialInfectionAction!loadEnableSpecialInfectionList.do" access="permitAll"></intercept-url>
-			<intercept-url pattern="/disinfectsystem/basedatamanager/operationOrgAction!findOrgUnitOperationName.do" access="permitAll"></intercept-url>
 			<intercept-url pattern="/disinfectSystem/printBarcodeAction!printBarcodeImage.do" access="permitAll"></intercept-url>
 			<intercept-url pattern="/servlets/image" access="permitAll"></intercept-url>
-			
+
 			<!--  user is not an anonymous or a remember-me user -->
 			<intercept-url pattern="/**" access="isFullyAuthenticated()"></intercept-url>
 			<form-login login-page="/logon.jsp" always-use-default-target="true" default-target-url="/openSystemMainPage.jsp" authentication-failure-url="/logon.jsp?login_error=1"></form-login>