Merge branch 'dev-add-permission' of xiongzhu/raex_back into master

src/main/java/com/izouma/nineth/security/WebSecurityConfig.java

@@ -138,6 +138,7 @@ public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
                 .antMatchers("/user/faceAuthNotify/*").permitAll()
                 .antMatchers("/blindBoxItem/rare/*").permitAll()
                 .antMatchers("/user/synchronizationData").permitAll()
+                .antMatchers("/asset/whetherMetaCanUse/*").permitAll()
                 // all other requests need to be authenticated
                 .anyRequest().authenticated().and()
                 // make sure we use stateless session; session won't be used to