diff --git a/src/plugin/admin/app/common/LayuiForm.php b/src/plugin/admin/app/common/LayuiForm.php
index 5bf6bca..d298226 100644
--- a/src/plugin/admin/app/common/LayuiForm.php
+++ b/src/plugin/admin/app/common/LayuiForm.php
@@ -202,10 +202,10 @@ EOF;
     <div class="$class">
         <span>$value</span>
         <input type="text" style="display:none" name="$field" value="$value" />
-        <button type="button" class="pear-btn pear-btn-primary pear-btn-sm" id="$id">
+        <button type="button" class="pear-btn pear-btn-primary pear-btn-sm" id="$id" permission="app.admin.upload.file">
             <i class="layui-icon">&#xe67c;</i>上传文件
         </button>
-        <button type="button" class="pear-btn pear-btn-primary pear-btn-sm" id="attachment-choose-$id">
+        <button type="button" class="pear-btn pear-btn-primary pear-btn-sm" id="attachment-choose-$id" permission="app.admin.upload.attachment">
             <i class="layui-icon">&#xe649;</i>选择附件
         </button>
     </div>
@@ -274,10 +274,10 @@ EOF;
     <div class="$class">
         <img style="max-width:90px;max-height:90px;" src=""/>
         <input type="text" style="display:none" name="$field" value="$value" />
-        <button type="button" class="pear-btn pear-btn-primary pear-btn-sm" id="$id">
+        <button type="button" class="pear-btn pear-btn-primary pear-btn-sm" id="$id"  permission="app.admin.upload.image">
             <i class="layui-icon">&#xe67c;</i>上传图片
         </button>
-        <button type="button" class="pear-btn pear-btn-primary pear-btn-sm" id="attachment-choose-$id">
+        <button type="button" class="pear-btn pear-btn-primary pear-btn-sm" id="attachment-choose-$id"  permission="app.admin.upload.attachment">
             <i class="layui-icon">&#xe649;</i>选择附件
         </button>
     </div>
diff --git a/src/plugin/admin/app/view/admin/update.html b/src/plugin/admin/app/view/admin/update.html
index d043dd9..357b199 100644
--- a/src/plugin/admin/app/view/admin/update.html
+++ b/src/plugin/admin/app/view/admin/update.html
@@ -39,10 +39,10 @@
                         <div class="layui-input-block">
                             <img style="max-width:90px;max-height:90px;" src=""/>
                             <input type="text" style="display:none" name="avatar" value="" />
-                            <button type="button" class="pear-btn pear-btn-primary pear-btn-sm" id="avatar">
+                            <button type="button" class="pear-btn pear-btn-primary pear-btn-sm" id="avatar" permission="app.admin.upload.avatar">
                                 <i class="layui-icon">&#xe67c;</i>上传图片
                             </button>
-                            <button type="button" class="pear-btn pear-btn-primary pear-btn-sm" id="attachment-choose-avatar">
+                            <button type="button" class="pear-btn pear-btn-primary pear-btn-sm" id="attachment-choose-avatar" permission="app.admin.upload.attachment">
                                 <i class="layui-icon">&#xe649;</i>选择附件
                             </button>
                         </div>
diff --git a/src/plugin/admin/app/view/config/index.html b/src/plugin/admin/app/view/config/index.html
index fb07f41..e68b61c 100644
--- a/src/plugin/admin/app/view/config/index.html
+++ b/src/plugin/admin/app/view/config/index.html
@@ -40,9 +40,12 @@
                                 <div class="layui-input-block">
                                     <img style="max-width:90px;max-height:90px;" src=""/>
                                     <input type="text" style="display:none" name="image" value="/app/admin/admin/avatar.png" />
-                                    <button type="button" class="pear-btn pear-btn-primary pear-btn-sm" id="image">
+                                    <button type="button" class="pear-btn pear-btn-primary pear-btn-sm" id="image" permission="app.admin.upload.avatar">
                                         <i class="layui-icon">&#xe67c;</i>上传图片
                                     </button>
+                                    <button type="button" class="pear-btn pear-btn-primary pear-btn-sm" id="attachment-choose-image" permission="app.admin.upload.attachment">
+                                        <i class="layui-icon">&#xe649;</i>选择附件
+                                    </button>
                                 </div>
                             </div>
 
@@ -192,6 +195,19 @@
                 // image
                 let input = $("#image").prev();
                 input.prev().attr("src", input.val());
+                layui.$("#attachment-choose-avatar").on("click", function() {
+                    parent.layer.open({
+                        type: 2,
+                        title: "选择附件",
+                        content: "/app/admin/upload/attachment?ext=jpg,jpeg,png,gif,bmp",
+                        area: ["95%", "90%"],
+                        success: function (layero, index) {
+                            parent.layui.$("#layui-layer" + index).data("callback", function (data) {
+                                input.val(data.url).prev().attr("src", data.url);
+                            });
+                        }
+                    });
+                });
                 layui.upload.render({
                     elem: "#image",
                     url: "/app/admin/upload/avatar",
diff --git a/src/plugin/admin/app/view/user/insert.html b/src/plugin/admin/app/view/user/insert.html
index a4740f0..e7a8383 100644
--- a/src/plugin/admin/app/view/user/insert.html
+++ b/src/plugin/admin/app/view/user/insert.html
@@ -46,10 +46,10 @@
                         <div class="layui-input-block">
                             <img style="max-width:90px;max-height:90px;" src=""/>
                             <input type="text" style="display:none" name="avatar" value="" />
-                            <button type="button" class="pear-btn pear-btn-primary pear-btn-sm" id="avatar">
+                            <button type="button" class="pear-btn pear-btn-primary pear-btn-sm" id="avatar" permission="app.admin.upload.avatar">
                                 <i class="layui-icon">&#xe67c;</i>上传图片
                             </button>
-                            <button type="button" class="pear-btn pear-btn-primary pear-btn-sm" id="attachment-choose-avatar">
+                            <button type="button" class="pear-btn pear-btn-primary pear-btn-sm" id="attachment-choose-avatar" permission="app.admin.upload.attachment">
                                 <i class="layui-icon">&#xe649;</i>选择附件
                             </button>
                         </div>
diff --git a/src/plugin/admin/app/view/user/update.html b/src/plugin/admin/app/view/user/update.html
index 265d9d9..6713912 100644
--- a/src/plugin/admin/app/view/user/update.html
+++ b/src/plugin/admin/app/view/user/update.html
@@ -46,10 +46,10 @@
                         <div class="layui-input-block">
                             <img style="max-width:90px;max-height:90px;" src=""/>
                             <input type="text" style="display:none" name="avatar" value="" />
-                            <button type="button" class="pear-btn pear-btn-primary pear-btn-sm" id="avatar">
+                            <button type="button" class="pear-btn pear-btn-primary pear-btn-sm" id="avatar" permission="app.admin.upload.avatar">
                                 <i class="layui-icon">&#xe67c;</i>上传图片
                             </button>
-                            <button type="button" class="pear-btn pear-btn-primary pear-btn-sm" id="attachment-choose-avatar">
+                            <button type="button" class="pear-btn pear-btn-primary pear-btn-sm" id="attachment-choose-avatar" permission="app.admin.upload.attachment">
                                 <i class="layui-icon">&#xe649;</i>选择附件
                             </button>
                         </div>