diff --git a/src/main/java/com/xkrs/controller/MerchantSettlementController.java b/src/main/java/com/xkrs/controller/MerchantSettlementController.java
index 12710a5..04c62ac 100644
--- a/src/main/java/com/xkrs/controller/MerchantSettlementController.java
+++ b/src/main/java/com/xkrs/controller/MerchantSettlementController.java
@@ -153,7 +153,8 @@ public class MerchantSettlementController {
      * @return
      */
     @PostMapping("/selectDefaultBusiness")
-    public String selectDefaultBusiness(@RequestBody Map map){
+    @PreAuthorize("hasAnyAuthority('auth_administor')")
+    public String selectDefaultBusiness(@RequestBody Map map,@RequestHeader(value="Authorization") String token){
         String businessCity = (String) map.get("businessCity");
         String businessCountry = (String) map.get("businessCountry");
         String businessName = (String) map.get("businessName");