diff --git a/ruoyi-mall/src/main/java/com/cyl/manager/oms/controller/OrderController.java b/ruoyi-mall/src/main/java/com/cyl/manager/oms/controller/OrderController.java
index d3f101d..7a5a74b 100644
--- a/ruoyi-mall/src/main/java/com/cyl/manager/oms/controller/OrderController.java
+++ b/ruoyi-mall/src/main/java/com/cyl/manager/oms/controller/OrderController.java
@@ -128,6 +128,7 @@ public class OrderController extends BaseController {
         return ResponseEntity.ok(service.log(orderId));
     }
 
+    @PreAuthorize("@ss.hasAnyRoles('admin')")
     @ApiOperation("订单解密")
     @GetMapping("/decryptPhone/{orderId}")
     public ResponseEntity<String> decryptPhone(@PathVariable Long orderId){