diff --git a/yudao-framework/yudao-spring-boot-starter-biz-tenant/src/main/java/cn/iocoder/yudao/framework/tenant/core/security/TenantSecurityWebFilter.java b/yudao-framework/yudao-spring-boot-starter-biz-tenant/src/main/java/cn/iocoder/yudao/framework/tenant/core/security/TenantSecurityWebFilter.java
index d1e203d7e..a7b510631 100644
--- a/yudao-framework/yudao-spring-boot-starter-biz-tenant/src/main/java/cn/iocoder/yudao/framework/tenant/core/security/TenantSecurityWebFilter.java
+++ b/yudao-framework/yudao-spring-boot-starter-biz-tenant/src/main/java/cn/iocoder/yudao/framework/tenant/core/security/TenantSecurityWebFilter.java
@@ -40,7 +40,10 @@ public class TenantSecurityWebFilter extends ApiRequestFilter {
     private static final List<String> INNER_IGNORE_URLS = Arrays.asList(
             "/admin-api/iot/device-operation-record/runOverview",
             "/admin-api/mes/device-line/deviceParameterAnalysis",
-            "/admin-api/mes/device-ledger/list"
+            "/admin-api/mes/device-ledger/list",
+            "/admin-api/mes/energy-type/list",
+            "/admin-api/mes/energy-device/getList",
+            "/admin-api/mes/energy-device/queryOverviewData"
     );
 
     private final TenantProperties tenantProperties;
diff --git a/yudao-framework/yudao-spring-boot-starter-security/src/main/java/cn/iocoder/yudao/framework/security/config/YudaoWebSecurityConfigurerAdapter.java b/yudao-framework/yudao-spring-boot-starter-security/src/main/java/cn/iocoder/yudao/framework/security/config/YudaoWebSecurityConfigurerAdapter.java
index 3288c9fb1..d54e2e6a9 100644
--- a/yudao-framework/yudao-spring-boot-starter-security/src/main/java/cn/iocoder/yudao/framework/security/config/YudaoWebSecurityConfigurerAdapter.java
+++ b/yudao-framework/yudao-spring-boot-starter-security/src/main/java/cn/iocoder/yudao/framework/security/config/YudaoWebSecurityConfigurerAdapter.java
@@ -56,7 +56,10 @@ public class YudaoWebSecurityConfigurerAdapter {
     private static final List<String> RUN_OVERVIEW_PERMIT_ALL_URLS = Arrays.asList(
             "/admin-api/iot/device-operation-record/runOverview",
             "/admin-api/mes/device-line/deviceParameterAnalysis",
-            "/admin-api/mes/device-ledger/list"
+            "/admin-api/mes/device-ledger/list",
+            "/admin-api/mes/energy-type/list",
+            "/admin-api/mes/energy-device/getList",
+            "/admin-api/mes/energy-device/queryOverviewData"
     );
 
     @Resource
diff --git a/yudao-module-mes/yudao-module-mes-biz/src/main/java/cn/iocoder/yudao/module/mes/controller/admin/energydevice/EnergyDeviceController.java b/yudao-module-mes/yudao-module-mes-biz/src/main/java/cn/iocoder/yudao/module/mes/controller/admin/energydevice/EnergyDeviceController.java
index bfa4beebd..d668cf31c 100644
--- a/yudao-module-mes/yudao-module-mes-biz/src/main/java/cn/iocoder/yudao/module/mes/controller/admin/energydevice/EnergyDeviceController.java
+++ b/yudao-module-mes/yudao-module-mes-biz/src/main/java/cn/iocoder/yudao/module/mes/controller/admin/energydevice/EnergyDeviceController.java
@@ -106,7 +106,7 @@ public class EnergyDeviceController {
 
     @GetMapping("/queryOverviewData")
     @Operation(summary = "查询能源总览数据")
-    @PreAuthorize("@ss.hasPermission('mes:energy-device:queryRecords')")
+    @PreAuthorize("@ss.isInnerProfile() || @ss.hasPermission('mes:energy-device:queryRecords')")
     public CommonResult<EnergyOverviewRespVO> queryOverviewData(@Valid EnergyOverviewReqVO reqVO) {
         return success(energyDeviceService.queryOverviewData(reqVO));
     }