diff --git a/src/modules/base/controller/admin/sys/role.ts b/src/modules/base/controller/admin/sys/role.ts
new file mode 100644
index 0000000..39010a1
--- /dev/null
+++ b/src/modules/base/controller/admin/sys/role.ts
@@ -0,0 +1,38 @@
+import { Provide } from '@midwayjs/core';
+import { CoolController, BaseController } from '@cool-midway/core';
+import { Context } from 'vm';
+import { BaseSysRoleEntity } from '../../../entity/sys/role';
+import { BaseSysRoleService } from '../../../service/sys/role';
+
+/**
+ * 系统角色
+ */
+@Provide()
+@CoolController({
+  api: ['add', 'delete', 'update', 'info', 'list', 'page'],
+  entity: BaseSysRoleEntity,
+  service: BaseSysRoleService,
+  // 新增的时候插入当前用户ID
+  insertParam: async (ctx: Context) => {
+    return {
+      userId: ctx.admin.userId,
+    };
+  },
+  pageQueryOp: {
+    keyWordLikeFields: ['a.name', 'a.label'],
+    where: async (ctx: Context) => {
+      const { userId, roleIds, username } = ctx.admin;
+      return [
+        // 超级管理员的角色不展示
+        ['a.label != :label', { label: 'admin' }],
+        // 如果不是超管，只能看到自己新建的或者自己有的角色
+        [
+          `(a.userId=:userId or a.id in (${roleIds.join(',')}))`,
+          { userId },
+          username !== 'admin',
+        ],
+      ];
+    },
+  },
+})
+export class BaseSysRoleController extends BaseController {}