diff --git a/novalon-manage-api/manage-sys/src/main/java/cn/novalon/manage/sys/dto/request/MenuCreateRequest.java b/novalon-manage-api/manage-sys/src/main/java/cn/novalon/manage/sys/dto/request/MenuCreateRequest.java
index 9932f49..d3a7844 100644
--- a/novalon-manage-api/manage-sys/src/main/java/cn/novalon/manage/sys/dto/request/MenuCreateRequest.java
+++ b/novalon-manage-api/manage-sys/src/main/java/cn/novalon/manage/sys/dto/request/MenuCreateRequest.java
@@ -1,6 +1,8 @@
 package cn.novalon.manage.sys.dto.request;
 
+import jakarta.validation.constraints.Min;
 import jakarta.validation.constraints.NotBlank;
+import jakarta.validation.constraints.Size;
 
 /**
  * 菜单创建请求DTO
@@ -17,11 +19,13 @@ public class MenuCreateRequest {
     private Long parentId;
 
     @NotBlank(message = "菜单名称不能为空")
+    @Size(min = 1, max = 100, message = "菜单名称长度必须在1-100之间")
     private String menuName;
 
     @NotBlank(message = "菜单类型不能为空")
     private String menuType;
 
+    @Min(value = 0, message = "排序不能为负数")
     private Integer orderNum;
 
     private String component;
diff --git a/novalon-manage-api/manage-sys/src/main/java/cn/novalon/manage/sys/dto/request/MenuUpdateRequest.java b/novalon-manage-api/manage-sys/src/main/java/cn/novalon/manage/sys/dto/request/MenuUpdateRequest.java
index 86f2714..f64efcf 100644
--- a/novalon-manage-api/manage-sys/src/main/java/cn/novalon/manage/sys/dto/request/MenuUpdateRequest.java
+++ b/novalon-manage-api/manage-sys/src/main/java/cn/novalon/manage/sys/dto/request/MenuUpdateRequest.java
@@ -1,5 +1,8 @@
 package cn.novalon.manage.sys.dto.request;
 
+import jakarta.validation.constraints.Min;
+import jakarta.validation.constraints.Size;
+
 /**
  * 菜单更新请求DTO
  * 
@@ -14,10 +17,12 @@ public class MenuUpdateRequest {
 
     private Long parentId;
 
+    @Size(min = 1, max = 100, message = "菜单名称长度必须在1-100之间")
     private String menuName;
 
     private String menuType;
 
+    @Min(value = 0, message = "排序不能为负数")
     private Integer orderNum;
 
     private String component;
diff --git a/novalon-manage-api/manage-sys/src/main/java/cn/novalon/manage/sys/dto/request/RoleUpdateRequest.java b/novalon-manage-api/manage-sys/src/main/java/cn/novalon/manage/sys/dto/request/RoleUpdateRequest.java
index 7622700..4cbe20b 100644
--- a/novalon-manage-api/manage-sys/src/main/java/cn/novalon/manage/sys/dto/request/RoleUpdateRequest.java
+++ b/novalon-manage-api/manage-sys/src/main/java/cn/novalon/manage/sys/dto/request/RoleUpdateRequest.java
@@ -1,11 +1,16 @@
 package cn.novalon.manage.sys.dto.request;
 
 import jakarta.validation.constraints.Min;
+import jakarta.validation.constraints.Pattern;
+import jakarta.validation.constraints.Size;
 
 public class RoleUpdateRequest {
 
+    @Size(min = 2, max = 50, message = "角色名称长度必须在2-50之间")
     private String roleName;
 
+    @Size(min = 2, max = 50, message = "角色权限字符串长度必须在2-50之间")
+    @Pattern(regexp = "^[a-zA-Z0-9_-]+$", message = "角色权限字符串只能包含字母、数字、下划线和横线")
     private String roleKey;
 
     @Min(value = 1, message = "显示顺序必须大于0")
diff --git a/novalon-manage-api/manage-sys/src/main/java/cn/novalon/manage/sys/dto/request/UserUpdateRequest.java b/novalon-manage-api/manage-sys/src/main/java/cn/novalon/manage/sys/dto/request/UserUpdateRequest.java
index cd313a1..94964a3 100644
--- a/novalon-manage-api/manage-sys/src/main/java/cn/novalon/manage/sys/dto/request/UserUpdateRequest.java
+++ b/novalon-manage-api/manage-sys/src/main/java/cn/novalon/manage/sys/dto/request/UserUpdateRequest.java
@@ -2,6 +2,7 @@ package cn.novalon.manage.sys.dto.request;
 
 import io.swagger.v3.oas.annotations.media.Schema;
 import jakarta.validation.constraints.Email;
+import jakarta.validation.constraints.Size;
 
 /**
  * 用户更新请求DTO
@@ -13,6 +14,8 @@ import jakarta.validation.constraints.Email;
 public class UserUpdateRequest {
 
     @Schema(description = "邮箱", example = "newemail@example.com")
+    @Email(message = "邮箱格式不正确")
+    @Size(max = 100, message = "邮箱长度不能超过100")
     private String email;
 
     @Schema(description = "状态：0-禁用，1-正常", example = "1")
@@ -24,7 +27,6 @@ public class UserUpdateRequest {
     @Schema(description = "是否清除角色关联", example = "false")
     private Boolean clearRole;
 
-    @Email(message = "邮箱格式不正确")
     public String getEmail() {
         return email;
     }