Index: ssts-web/src/main/webapp/disinfectsystem/config/gzszyy/spring/security/applicationContext-acegi-security.xml
===================================================================
diff -u -r40382 -r40636
--- ssts-web/src/main/webapp/disinfectsystem/config/gzszyy/spring/security/applicationContext-acegi-security.xml	(.../applicationContext-acegi-security.xml)	(revision 40382)
+++ ssts-web/src/main/webapp/disinfectsystem/config/gzszyy/spring/security/applicationContext-acegi-security.xml	(.../applicationContext-acegi-security.xml)	(revision 40636)
@@ -129,7 +129,9 @@
 			<!-- GZSZYY-84： 数据实时看板-->
 			<intercept-url pattern="/disinfectsystem/realTimeDashboards/**" access="permitAll"></intercept-url>
 			<intercept-url pattern="/jasperreports/jasperreportsAction!getDataByDataSources.do" access="permitAll"></intercept-url>
-			<!--  user is not an anonymous or a remember-me user -->
+			<!-- GZSZYY-121： 登录验证-->
+			<intercept-url pattern="/systemmanage/user/userAction!isModifiedPwdByUser.do" access="permitAll"></intercept-url>
+			<intercept-url pattern="/personalSetting/modifyPWDByExt/save.do" access="permitAll"></intercept-url><!--  user is not an anonymous or a remember-me user -->
 			<intercept-url pattern="/**" access="isFullyAuthenticated()"></intercept-url>
 			<form-login login-page="/logon.jsp" always-use-default-target="true" default-target-url="/openSystemMainPage.jsp" authentication-failure-url="/logon.jsp?login_error=1"></form-login>