diff --git a/cloud-common/cloud-common-saas/src/main/java/com/muyu/cloud/common/saas/interceptor/WebMvcSaaSConfig.java b/cloud-common/cloud-common-saas/src/main/java/com/muyu/cloud/common/saas/interceptor/WebMvcSaaSConfig.java
index 4c79417..ec72e6e 100644
--- a/cloud-common/cloud-common-saas/src/main/java/com/muyu/cloud/common/saas/interceptor/WebMvcSaaSConfig.java
+++ b/cloud-common/cloud-common-saas/src/main/java/com/muyu/cloud/common/saas/interceptor/WebMvcSaaSConfig.java
@@ -12,13 +12,13 @@ public class WebMvcSaaSConfig implements WebMvcConfigurer {
     /**
      * 不需要拦截的地址
      */
-    public static final String[] excludeUrls = {"/login", "/logout", "/refresh"};
+    public static final String[] EXCLUDE_URLS = {"/dept/**", "/login", "/logout", "/refresh"};
 
     @Override
     public void addInterceptors (InterceptorRegistry registry) {
         registry.addInterceptor(getHeaderInterceptor())
                 .addPathPatterns("/**")
-                .excludePathPatterns(excludeUrls)
+                .excludePathPatterns(EXCLUDE_URLS)
                 .order(-10);
     }
 
diff --git a/cloud-modules/cloud-modules-system/src/main/java/com/muyu/system/controller/SysDeptController.java b/cloud-modules/cloud-modules-system/src/main/java/com/muyu/system/controller/SysDeptController.java
index 49af06c..3818d11 100644
--- a/cloud-modules/cloud-modules-system/src/main/java/com/muyu/system/controller/SysDeptController.java
+++ b/cloud-modules/cloud-modules-system/src/main/java/com/muyu/system/controller/SysDeptController.java
@@ -72,7 +72,8 @@ public class SysDeptController extends BaseController {
             return error("新增部门'" + dept.getDeptName() + "'失败，部门名称已存在");
         }
         dept.setCreateBy(SecurityUtils.getUsername());
-        dept.setFirmCode(SecurityUtils.getSaasKey());
+        SysDept sysDept = deptService.selectDeptById(dept.getParentId());
+        dept.setFirmCode(sysDept.getFirmCode());
         return toAjax(deptService.insertDept(dept));
     }
 
diff --git a/cloud-modules/cloud-modules-system/src/main/java/com/muyu/system/controller/SysUserController.java b/cloud-modules/cloud-modules-system/src/main/java/com/muyu/system/controller/SysUserController.java
index abfe627..14c5dd7 100644
--- a/cloud-modules/cloud-modules-system/src/main/java/com/muyu/system/controller/SysUserController.java
+++ b/cloud-modules/cloud-modules-system/src/main/java/com/muyu/system/controller/SysUserController.java
@@ -63,6 +63,7 @@ public class SysUserController extends BaseController {
     @GetMapping("/list")
     public Result<TableDataInfo<SysUser>> list (SysUser user) {
         startPage();
+        user.setFirmCode(SecurityUtils.getSaasKey());
         List<SysUser> list = userService.selectUserList(user);
         return getDataTable(list);
     }
@@ -197,6 +198,7 @@ public class SysUserController extends BaseController {
         }
         user.setCreateBy(SecurityUtils.getUsername());
         user.setPassword(SecurityUtils.encryptPassword(user.getPassword()));
+        user.setFirmCode(SecurityUtils.getSaasKey());
         return toAjax(userService.insertUser(user));
     }
 
diff --git a/cloud-modules/cloud-modules-system/src/main/resources/mapper/system/SysUserMapper.xml b/cloud-modules/cloud-modules-system/src/main/resources/mapper/system/SysUserMapper.xml
index 9eb51ca..a7e4061 100644
--- a/cloud-modules/cloud-modules-system/src/main/resources/mapper/system/SysUserMapper.xml
+++ b/cloud-modules/cloud-modules-system/src/main/resources/mapper/system/SysUserMapper.xml
@@ -93,6 +93,9 @@
         <if test="userId != null and userId != 0">
             AND u.user_id = #{userId}
         </if>
+        <if test="firmCode != null and firmCode != '' and firmCode != 'FIRM'">
+            AND u.firm_code like concat('%', #{firmCode}, '%')
+        </if>
         <if test="userName != null and userName != ''">
             AND u.user_name like concat('%', #{userName}, '%')
         </if>