diff --git a/maku-framework/src/main/java/net/maku/framework/security/utils/PreAuthorizeUtil.java b/maku-framework/src/main/java/net/maku/framework/security/utils/PreAuthorizeUtil.java
new file mode 100644
index 0000000..dc642ab
--- /dev/null
+++ b/maku-framework/src/main/java/net/maku/framework/security/utils/PreAuthorizeUtil.java
@@ -0,0 +1,53 @@
+package net.maku.framework.security.utils;
+
+import cn.hutool.extra.spring.SpringUtil;
+import org.springframework.context.ApplicationContext;
+import org.springframework.core.annotation.AnnotationUtils;
+import org.springframework.security.access.prepost.PreAuthorize;
+import org.springframework.stereotype.Controller;
+
+import java.lang.reflect.Method;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.regex.Matcher;
+import java.util.regex.Pattern;
+
+/**
+ * SpringSecurity @PreAuthorize 注解 权限标识
+ *
+ * @author 阿沐 babamu@126.com
+ * <a href="https://maku.net">MAKU</a>
+ */
+public class PreAuthorizeUtil {
+
+    /**
+     * 获取 @PreAuthorize 注解的权限标识列表
+     *
+     * @return 权限标识列表
+     */
+    public static List<String> getPreAuthorizeList() {
+        List<String> authorities = new ArrayList<>();
+        ApplicationContext context = SpringUtil.getApplicationContext();
+        String[] beanNames = context.getBeanNamesForAnnotation(Controller.class);
+        for (String beanName : beanNames) {
+            Object bean = context.getBean(beanName);
+            Method[] methods = bean.getClass().getDeclaredMethods();
+            for (Method method : methods) {
+                PreAuthorize preAuthorize = AnnotationUtils.findAnnotation(method, PreAuthorize.class);
+                if (preAuthorize != null) {
+                    String value = preAuthorize.value();
+                    // 使用正则表达式提取权限字符串
+                    Pattern pattern = Pattern.compile("hasAuthority\\('([^']*)'\\)");
+                    Matcher matcher = pattern.matcher(value);
+                    while (matcher.find()) {
+                        String authority = matcher.group(1);
+                        authorities.add(authority);
+                    }
+                }
+            }
+        }
+
+        return authorities;
+    }
+
+}
\ No newline at end of file