diff --git a/app/controllers/ec_course_supports_controller.rb b/app/controllers/ec_course_supports_controller.rb
index 8b2811ad..8a261d11 100644
--- a/app/controllers/ec_course_supports_controller.rb
+++ b/app/controllers/ec_course_supports_controller.rb
@@ -3,7 +3,7 @@ class EcCourseSupportsController < ApplicationController
   before_filter :find_year, :except => [:edit_require_vs_course, :destroy_require_vs_course]
   skip_before_filter :verify_authenticity_token, :only => [:create, :edit_require_vs_course, :destroy_require_vs_course]
   before_filter :require_login
-  before_filter :ec_auth
+  before_filter :ec_auth, :except => [:edit_require_vs_course, :destroy_require_vs_course]
 
   ###############################################################################
   # 毕业要求vs课程体系
diff --git a/app/controllers/ec_years_controller.rb b/app/controllers/ec_years_controller.rb
index e5a4c936..19c7828f 100644
--- a/app/controllers/ec_years_controller.rb
+++ b/app/controllers/ec_years_controller.rb
@@ -4,7 +4,7 @@ class EcYearsController < ApplicationController
 
   before_filter :find_major_and_year, except: [:create]
   before_filter :require_login
-  before_filter :ec_auth
+  before_filter :ec_auth, except: [:create]
 
   #before_filter :find_year, only: [:set_calculation_value]
   skip_before_filter :verify_authenticity_token, :only => [:import_students, :set_calculation_value, :destroy_students]