diff --git a/代码库/mall-admin/src/main/java/com/sock/mall/controller/UmsPermissionController.java b/代码库/mall-admin/src/main/java/com/sock/mall/controller/UmsPermissionController.java
new file mode 100644
index 0000000..1a018c8
--- /dev/null
+++ b/代码库/mall-admin/src/main/java/com/sock/mall/controller/UmsPermissionController.java
@@ -0,0 +1,72 @@
+package com.macro.mall.controller;
+
+import com.macro.mall.dto.CommonResult;
+import com.macro.mall.dto.UmsPermissionNode;
+import com.macro.mall.model.UmsPermission;
+import com.macro.mall.service.UmsPermissionService;
+import io.swagger.annotations.Api;
+import io.swagger.annotations.ApiOperation;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.stereotype.Controller;
+import org.springframework.web.bind.annotation.*;
+
+import java.util.List;
+
+/**
+ * ��̨�û�Ȩ�޹���
+ */
+@Controller
+@Api(tags = "UmsPermissionController", description = "��̨�û�Ȩ�޹���")
+@RequestMapping("/permission")
+public class UmsPermissionController {
+    @Autowired
+    private UmsPermissionService permissionService;//Ȩ�޷���
+    @ApiOperation("����Ȩ��")
+    @RequestMapping(value = "/create", method = RequestMethod.POST)
+    @ResponseBody
+    public Object create(@RequestBody UmsPermission permission) {
+        int count = permissionService.create(permission);
+        if(count>0){
+            return new CommonResult().success(count);
+        }
+        return new CommonResult().failed();
+    }
+
+    @ApiOperation("�޸�Ȩ��")
+    @RequestMapping(value = "/update/{id}", method = RequestMethod.POST)
+    @ResponseBody
+    public Object update(@PathVariable Long id, @RequestBody UmsPermission permission) {
+        int count = permissionService.update(id,permission);
+        if(count>0){
+            return new CommonResult().success(count);
+        }
+        return new CommonResult().failed();
+    }
+
+    @ApiOperation("����id����ɾ��Ȩ��")
+    @RequestMapping(value = "/delete", method = RequestMethod.POST)
+    @ResponseBody
+    public Object delete(@RequestParam("ids") List<Long> ids) {
+        int count = permissionService.delete(ids);
+        if(count>0){
+            return new CommonResult().success(count);
+        }
+        return new CommonResult().failed();
+    }
+
+    @ApiOperation("�Բ㼶�ṹ��������Ȩ��")
+    @RequestMapping(value = "/treeList", method = RequestMethod.GET)//�㼶��
+    @ResponseBody
+    public Object treeList() {
+        List<UmsPermissionNode> permissionNodeList = permissionService.treeList();
+        return new CommonResult().success(permissionNodeList);
+    }
+
+    @ApiOperation("��ȡ����Ȩ���б�")
+    @RequestMapping(value = "/list", method = RequestMethod.GET)
+    @ResponseBody
+    public Object list() {
+        List<UmsPermission> permissionList = permissionService.list();
+        return new CommonResult().success(permissionList);
+    }
+}
\ No newline at end of file