diff --git a/wwwroot/api/check_users.dspy b/wwwroot/api/check_users.dspy
new file mode 100644
index 0000000..8f4505c
--- /dev/null
+++ b/wwwroot/api/check_users.dspy
@@ -0,0 +1,24 @@
+# check_users.dspy - 检查用户表
+
+dbname = get_module_dbname('rbac')
+async with DBPools().sqlorContext(dbname) as sor:
+    recs = await sor.sqlExe("SELECT id, username, status FROM users LIMIT 10", {})
+    users = []
+    for r in (recs or []):
+        users.append({
+            "id": getattr(r, "id", ""),
+            "username": getattr(r, "username", ""),
+            "status": getattr(r, "status", ""),
+        })
+    
+    admin = await sor.sqlExe("SELECT id, username, password, status FROM users WHERE username='admin'", {})
+    admin_info = None
+    for a in (admin or []):
+        admin_info = {
+            "id": getattr(a, "id", ""),
+            "username": getattr(a, "username", ""),
+            "password_hash": getattr(a, "password", "")[:40],
+            "status": getattr(a, "status", ""),
+        }
+
+return json.dumps({"users": users, "admin": admin_info}, ensure_ascii=False)