diff --git a/init_any_permissions.py b/init_any_permissions.py
index eb5b2c2..c1626e8 100644
--- a/init_any_permissions.py
+++ b/init_any_permissions.py
@@ -92,12 +92,15 @@ def scan_bricks(bricks_dir):
 def set_any_perms(paths):
     """为路径列表设置any权限"""
     count = 0
+    env = os.environ.copy()
+    env['SAGE_RBAC_DB'] = 'ocai_cms'
     for p in paths:
         result = subprocess.run(
             [py, sp, "any", p],
             cwd=sage_root,
             capture_output=True,
-            text=True
+            text=True,
+            env=env
         )
         status = "✓" if result.returncode == 0 else "✗"
         print(f"  {status} any  {p}")
diff --git a/init_superuser_permissions.py b/init_superuser_permissions.py
index ff0af97..43cae82 100644
--- a/init_superuser_permissions.py
+++ b/init_superuser_permissions.py
@@ -29,9 +29,11 @@ if not sp:
 
 def run(role, paths):
     assert sp is not None, "set_role_perm.py not found"
+    env = os.environ.copy()
+    env['SAGE_RBAC_DB'] = 'ocai_cms'
     for p in paths:
         print(f"  {role:30s} {p}")
-        subprocess.run([py, sp, role, p], cwd=sage_root, capture_output=True)
+        subprocess.run([py, sp, role, p], cwd=sage_root, capture_output=True, env=env)
 
 # ─── superuser — 所有权限 ───
 superuser_paths = [