diff --git a/Roadmap.txt b/Roadmap.txt
index 9cb39202..e6305bea 100644
--- a/Roadmap.txt
+++ b/Roadmap.txt
@@ -8,7 +8,7 @@
 	修复数据管理功能插入操作不支持SQL Server的IDENTITY_INSERT特性的BUG；
 	ok 更新山东省地图；
 	ok 修复环形饼图无法调整环大小的BUG；
-	修复系统禁用匿名用户后，分享给匿名用户的图表、看板展示链接无法访问的BUG（主要用于支持外部系统iframe嵌入集成）；
+	ok 修复系统禁用匿名用户后，分享给匿名用户的图表、看板展示链接无法访问的BUG（主要用于支持外部系统iframe嵌入集成）；
 	
 下一修订版本：
 	
diff --git a/datagear-web/src/main/resources/org/datagear/web/datagear-security.xml b/datagear-web/src/main/resources/org/datagear/web/datagear-security.xml
index 87b146b7..f2e96fcb 100644
--- a/datagear-web/src/main/resources/org/datagear/web/datagear-security.xml
+++ b/datagear-web/src/main/resources/org/datagear/web/datagear-security.xml
@@ -60,6 +60,14 @@
 		<intercept-url pattern="${subContextPath}/analysis/chartPlugin/chartPluginManager.js" access="IS_AUTHENTICATED_ANONYMOUSLY,ROLE_USER" />
 		<intercept-url pattern="${subContextPath}/analysis/chartPlugin/**" access="ROLE_ADMIN" />
 		
+		<!-- 图表、看板展示功能始终允许匿名用户访问，用于支持外部系统iframe嵌套场景 -->
+		<intercept-url pattern="${subContextPath}/analysis/chart/show/**" access="IS_AUTHENTICATED_ANONYMOUSLY,ROLE_USER" />
+		<intercept-url pattern="${subContextPath}/analysis/chart/showData" access="IS_AUTHENTICATED_ANONYMOUSLY,ROLE_USER" />
+		<intercept-url pattern="${subContextPath}/analysis/dashboard/show/**" access="IS_AUTHENTICATED_ANONYMOUSLY,ROLE_USER" />
+		<intercept-url pattern="${subContextPath}/analysis/dashboard/showData" access="IS_AUTHENTICATED_ANONYMOUSLY,ROLE_USER" />
+		<intercept-url pattern="${subContextPath}/analysis/dashboard/loadChart" access="IS_AUTHENTICATED_ANONYMOUSLY,ROLE_USER" />
+		<intercept-url pattern="${subContextPath}/analysis/dashboard/heartbeat" access="IS_AUTHENTICATED_ANONYMOUSLY,ROLE_USER" />
+		
 		<intercept-url pattern="${subContextPath}/login/**" access="IS_AUTHENTICATED_ANONYMOUSLY" />
 		<intercept-url pattern="${subContextPath}/register/**" access="IS_AUTHENTICATED_ANONYMOUSLY" />
 		<intercept-url pattern="${subContextPath}/resetPassword/**" access="IS_AUTHENTICATED_ANONYMOUSLY" />