Index: ssts-web/src/main/resources/systemset/operationDefine.xml
===================================================================
diff -u -r40302 -r40531
--- ssts-web/src/main/resources/systemset/operationDefine.xml	(.../operationDefine.xml)	(revision 40302)
+++ ssts-web/src/main/resources/systemset/operationDefine.xml	(.../operationDefine.xml)	(revision 40531)
@@ -644,6 +644,8 @@
       <operation operationId="SSTS_TrainingManage_Update" operationName="��ѵ�����޸�"></operation>
       <operation operationId="SSTS_TrainingManage_Delete" operationName="��ѵ����ɾ��"></operation>
       <operation operationId="SSTS_TrainingManage_Query" operationName="��ѵ�ļ���ѯ"></operation>
+      <operation operationId="SSTS_TrainingManage_Download" operationName="��ѵ�����ļ�����" mappingConfigPropertyName="enableCopyrightManagementModelOfTrainingManage"></operation>
+      <operation operationId="SSTS_DownloadPassword_Manager" operationName="�����������" mappingConfigPropertyName="enableCopyrightManagementModelOfTrainingManage"></operation>
     </modelName>
     <modelName modleName="�豸Ѳ�����" mappingConfigPropertyName="enableEquipmentInspectionManagementFunction">
       <operation operationId="SSTS_EquipmentInspection_Add" operationName="�豸Ѳ�����"></operation>
Index: ssts-web/src/main/webapp/WEB-INF/spring/security-standard/applicationContext-acegi-security.xml
===================================================================
diff -u -r39711 -r40531
--- ssts-web/src/main/webapp/WEB-INF/spring/security-standard/applicationContext-acegi-security.xml	(.../applicationContext-acegi-security.xml)	(revision 39711)
+++ ssts-web/src/main/webapp/WEB-INF/spring/security-standard/applicationContext-acegi-security.xml	(.../applicationContext-acegi-security.xml)	(revision 40531)
@@ -129,6 +129,8 @@
 			<!-- GZSZYY-84： 数据实时看板-->
 			<intercept-url pattern="/disinfectsystem/realTimeDashboards/**" access="permitAll"></intercept-url>
 			<intercept-url pattern="/jasperreports/jasperreportsAction!getDataByDataSources.do" access="permitAll"></intercept-url>
+			<!-- ZSRY-126： 培训管理-->
+			<intercept-url pattern="/attachfiles/**" access="permitAll"></intercept-url>
 			<!--  user is not an anonymous or a remember-me user -->
 			<intercept-url pattern="/**" access="isFullyAuthenticated()"></intercept-url>
 			<form-login login-page="/logon.jsp" always-use-default-target="true" default-target-url="/openSystemMainPage.jsp" authentication-failure-url="/logon.jsp?login_error=1"></form-login>