diff --git a/src/Api/TakeoutSaaS.AdminApi/Controllers/MerchantsController.cs b/src/Api/TakeoutSaaS.AdminApi/Controllers/MerchantsController.cs
index 79b4753..98125ac 100644
--- a/src/Api/TakeoutSaaS.AdminApi/Controllers/MerchantsController.cs
+++ b/src/Api/TakeoutSaaS.AdminApi/Controllers/MerchantsController.cs
@@ -412,7 +412,7 @@ public sealed class MerchantsController(IMediator mediator) : BaseApiController
     /// 导出商户 PDF。
     /// </summary>
     [HttpGet("{merchantId:long}/export-pdf")]
-    [PermissionAuthorize("merchant:export")]
+    [PermissionAuthorize("merchant:read")]
     [Produces("application/pdf")]
     [ProducesResponseType(typeof(FileContentResult), StatusCodes.Status200OK)]
     public async Task<IActionResult> ExportPdf(long merchantId, CancellationToken cancellationToken)