diff --git a/pmapi/src/main/resources/application-prod.yml b/pmapi/src/main/resources/application-prod.yml
new file mode 100644
index 0000000..e69de29
diff --git a/pmapi/src/main/resources/security/auth-dev.yml b/pmapi/src/main/resources/security/auth-dev.yml
new file mode 100644
index 0000000..1341250
--- /dev/null
+++ b/pmapi/src/main/resources/security/auth-dev.yml
@@ -0,0 +1,45 @@
+security:
+  auth:
+    auth-require-url: /api/v1/user/auth/auth-require
+    invalid-session-url: /api/v1/user/auth/invalid-session
+    password-login-url: /api/v1/user/auth/login/password
+    logout-url: /api/v1/user/auth/logout
+    ignore-auth-urls:
+      - /v2/api-docs
+      - /swagger-ui.html
+      - /webjars/**
+      - /swagger-resources/**
+      - /webjars/
+      - /api/v1/user/auth/register
+      - /api/v1/user/auth/auth-require
+      - /api/v1/user/auth/invalid-session
+      - /api/v1/user/auth/login/password
+      - /api/v1/user/auth/forget-password
+      - /doc.html
+      - /ok.html
+      - /open/api/**
+    ignore-csrf-urls:
+      - /api/v1/user/auth/**
+      - /v2/api-docs
+      - /swagger-ui.html
+      - /webjars/**
+      - /swagger-resources/**
+      - /webjars/
+      - /doc.html
+      - /ok.html
+      - /api/v1/**
+      - /file/**
+      - /optLog/**
+      - /dict/**
+    role-map:
+      "engineer":
+      "project_manager":
+        - /api/v1/user-info/kick-off/**
+      "enterprise_admin":
+      "regional_general_manager":
+      "driver":
+      "super_admin":
+        - /api/v1/user-info/save
+        - /api/v1/user-info/del
+        - /api/v1/user-info/kick-off/**
+        - /api/v1/user-info/password/mod
\ No newline at end of file
diff --git a/pmapi/src/main/resources/security/auth-prod.yml b/pmapi/src/main/resources/security/auth-prod.yml
new file mode 100644
index 0000000..37e3281
--- /dev/null
+++ b/pmapi/src/main/resources/security/auth-prod.yml
@@ -0,0 +1,41 @@
+security:
+  auth:
+    auth-require-url: /api/v1/user/auth/auth-require
+    invalid-session-url: /api/v1/user/auth/invalid-session
+    password-login-url: /api/v1/user/auth/login/password
+    logout-url: /api/v1/user/auth/logout
+    ignore-auth-urls:
+      - /v2/api-docs
+      - /swagger-ui.html
+      - /webjars/**
+      - /swagger-resources/**
+      - /webjars/
+      - /api/v1/user/auth/register
+      - /api/v1/user/auth/login/password
+      - /api/v1/user/auth/forget-password
+      - /doc.html
+      - /ok.html
+    ignore-csrf-urls:
+      - /api/v1/user/auth/**
+      - /v2/api-docs
+      - /swagger-ui.html
+      - /webjars/**
+      - /swagger-resources/**
+      - /webjars/
+      - /doc.html
+      - /ok.html
+      - /api/v1/**
+      - /file/**
+      - /optLog/**
+      - /dict/**
+    role-map:
+      "engineer":
+      "project_manager":
+      "enterprise_admin":
+      "regional_general_manager":
+      "driver":
+      "super_admin":
+        - /api/v1/user-info/save
+        - /api/v1/user-info/del
+        - /api/v1/user-info/kick-off/**
+        - /api/v1/user-info/password/mod
\ No newline at end of file