diff --git a/extend/base/admin/view/layout/default.html b/extend/base/admin/view/layout/default.html
index f834fc7..73261b3 100644
--- a/extend/base/admin/view/layout/default.html
+++ b/extend/base/admin/view/layout/default.html
@@ -25,6 +25,7 @@
         };
         window.PATH_CONFIG = PATH_CONFIG;
     </script>
+    <script>window.UA_AUTH = {$uaAuth|raw|default='false'};</script>
 
     {$content_js|raw}
     {:sysconfig('site','site_js_insert')}
diff --git a/extend/base/common/controller/AdminControllerBase.php b/extend/base/common/controller/AdminControllerBase.php
index e92107b..6104181 100644
--- a/extend/base/common/controller/AdminControllerBase.php
+++ b/extend/base/common/controller/AdminControllerBase.php
@@ -524,6 +524,12 @@ class AdminControllerBase extends BaseController
         ];
 
         $this->assign($data, -1);
+
+        // 全局权限集合（前端按钮显隐等消费），-1 标记为内部字段，同体 JSON 模式自动剔除
+        $payload = $this->authService->getAuthPayload();
+        $nodeForm = $this->authService->parseNodeStr($thisController . '/index');
+        $payload['controller'] = explode('/', $nodeForm, 2)[0];
+        $this->assign('uaAuth', json_encode($payload, JSON_UNESCAPED_UNICODE | JSON_HEX_TAG | JSON_HEX_APOS | JSON_HEX_AMP), -1);
     }
 
     /**