Index: ssts-web/src/main/webapp/disinfectsystem/config/hzszxrmyy/spring/security/applicationContext-acegi-security.xml
===================================================================
diff -u -r37209 -r41078
--- ssts-web/src/main/webapp/disinfectsystem/config/hzszxrmyy/spring/security/applicationContext-acegi-security.xml	(.../applicationContext-acegi-security.xml)	(revision 37209)
+++ ssts-web/src/main/webapp/disinfectsystem/config/hzszxrmyy/spring/security/applicationContext-acegi-security.xml	(.../applicationContext-acegi-security.xml)	(revision 41078)
@@ -62,6 +62,10 @@
 			<intercept-url pattern="/themes/**" access="permitAll"></intercept-url>
 			<intercept-url pattern="/services/**" access="permitAll"></intercept-url>
 			<intercept-url pattern="/mobileClient/**" access="permitAll"></intercept-url>
+			<!-- GZSZYY-121： 登录验证-->
+			<intercept-url pattern="/systemmanage/user/userAction!isModifiedPwdByUser.do" access="permitAll"></intercept-url>
+			<intercept-url pattern="/personalSetting/modifyPWDByExt/save.do" access="permitAll"></intercept-url><!--  user is not an anonymous or a remember-me user -->
+			
 			<intercept-url pattern="/buttjoint/**" access="permitAll"></intercept-url>
 			<intercept-url pattern="/disinfectSystem/sterilization/sterilizationRecordAction!uploadSterilizationRecordPic.do" access="permitAll"></intercept-url>