diff --git a/test_mini/utils/request.js b/test_mini/utils/request.js
index 724b149..97fa123 100644
--- a/test_mini/utils/request.js
+++ b/test_mini/utils/request.js
@@ -13,6 +13,9 @@ function request(url, method, data) {
           resolve(res.data);
         }else if(res.data.code == 401){
           getApp().onLaunch()
+          wx.switchTab({
+            url: '/pages/main/main',
+          })
         }
         else {
           wx.showToast({
diff --git a/test_server/crm/permission.py b/test_server/crm/permission.py
index 6e417ee..e7ce9dc 100644
--- a/test_server/crm/permission.py
+++ b/test_server/crm/permission.py
@@ -12,7 +12,8 @@ ConsumerPerms = [
     'my_subjects',
     'my_examtest',
     'examtest_create',
-    'article_list'
+    'article_list',
+    'exercise'
 ]
 
 class MyPermission(RbacPermission):
diff --git a/test_server/question/views.py b/test_server/question/views.py
index 6295a80..2242fca 100644
--- a/test_server/question/views.py
+++ b/test_server/question/views.py
@@ -228,6 +228,7 @@ class QuestionViewSet(ModelViewSet):
         return Response(status=status.HTTP_200_OK)
 
 class ExerciseView(APIView):
+    perms_map=[{'post':'exercise'}]
     def post(self, request):
         questioncat = request.data['questioncat']
         queryset = Question.objects.filter(is_delete=0,questioncat=questioncat).order_by('type','name')