diff --git a/magic-api/src/main/java/org/ssssssss/magicapi/core/web/MagicResourceController.java b/magic-api/src/main/java/org/ssssssss/magicapi/core/web/MagicResourceController.java
index 26aab998..6542d2ad 100644
--- a/magic-api/src/main/java/org/ssssssss/magicapi/core/web/MagicResourceController.java
+++ b/magic-api/src/main/java/org/ssssssss/magicapi/core/web/MagicResourceController.java
@@ -142,7 +142,7 @@ public class MagicResourceController extends MagicController implements MagicExc
 		return new JsonBean<>(service.unlock(id));
 	}
 
-	@GetMapping("/resource")
+	@PostMapping("/resource")
 	@ResponseBody
 	public JsonBean<Map<String, TreeNode<Attributes<Object>>>> resources(MagicHttpServletRequest request) {
 		Map<String, TreeNode<Group>> tree = service.tree();
@@ -180,7 +180,7 @@ public class MagicResourceController extends MagicController implements MagicExc
 					.stream()
 					.filter(it -> allowVisit(request, Authorization.VIEW, it))
 					.map(MagicEntity::simple)
-					.map((Function<MagicEntity, TreeNode<Attributes<Object>>>) TreeNode::new)
+					.map((Function<MagicEntity, TreeNode>) TreeNode::new)
 					.forEach(value::addChild);
 		}
 		return value;
diff --git a/magic-api/src/main/java/org/ssssssss/magicapi/core/web/MagicWorkbenchController.java b/magic-api/src/main/java/org/ssssssss/magicapi/core/web/MagicWorkbenchController.java
index 2311adcb..e0e1dac9 100644
--- a/magic-api/src/main/java/org/ssssssss/magicapi/core/web/MagicWorkbenchController.java
+++ b/magic-api/src/main/java/org/ssssssss/magicapi/core/web/MagicWorkbenchController.java
@@ -203,7 +203,7 @@ public class MagicWorkbenchController extends MagicController implements MagicEx
 		return new JsonBean<>(true);
 	}
 
-	@GetMapping("/search")
+	@PostMapping("/search")
 	@ResponseBody
 	public JsonBean<List<Map<String, Object>>> search(String keyword, MagicHttpServletRequest request) {
 		if (StringUtils.isBlank(keyword)) {