diff --git a/backend/src/main/resources/permission.json b/backend/src/main/resources/permission.json
index 007d28b0bf..ac031f9b61 100644
--- a/backend/src/main/resources/permission.json
+++ b/backend/src/main/resources/permission.json
@@ -798,6 +798,21 @@
       "name": "另存为",
       "resourceId": "PROJECT_REPORT_ANALYSIS",
       "license": false
+    },
+    {
+      "id": "SYSTEM_PLUGIN:UPLOAD",
+      "name": "点击上传",
+      "resourceId": "SYSTEM_PLUGIN"
+    },
+    {
+      "id": "SYSTEM_PLUGIN:DEL",
+      "name": "删除",
+      "resourceId": "SYSTEM_PLUGIN"
+    },
+    {
+      "id": "SYSTEM_PLUGIN:VIEW",
+      "name": "查看脚本",
+      "resourceId": "SYSTEM_PLUGIN"
     }
   ],
   "resource": [
@@ -928,6 +943,10 @@
     {
       "id": "PROJECT_REPORT_ANALYSIS",
       "name": "报表"
+    },
+    {
+      "id": "SYSTEM_PLUGIN",
+      "name": "插件管理"
     }
   ]
 }
\ No newline at end of file
diff --git a/frontend/src/business/components/common/components/MsTableHeader.vue b/frontend/src/business/components/common/components/MsTableHeader.vue
index cb910f841b..fa1224f9b1 100644
--- a/frontend/src/business/components/common/components/MsTableHeader.vue
+++ b/frontend/src/business/components/common/components/MsTableHeader.vue
@@ -10,7 +10,7 @@
       <span class="operate-button">
         <ms-table-button v-permission="createPermission" v-if="showCreate" icon="el-icon-circle-plus-outline"
                          :content="createTip" @click="create"/>
-        <ms-table-button icon="el-icon-download" v-if="showImport"
+        <ms-table-button icon="el-icon-download" v-if="showImport" v-permission="uploadPermission"
                          :content="importTip" @click="importData"/>
         <ms-table-button v-if="showRun" icon="el-icon-video-play"
                          type="primary"
@@ -78,6 +78,12 @@
           return []
         }
       },
+      uploadPermission: {
+        type: Array,
+        default() {
+          return []
+        }
+      },
       runTip: {
         type: String,
 
diff --git a/frontend/src/business/components/settings/plugin/PluginConfig.vue b/frontend/src/business/components/settings/plugin/PluginConfig.vue
index f5f88c221c..5d905d26f5 100644
--- a/frontend/src/business/components/settings/plugin/PluginConfig.vue
+++ b/frontend/src/business/components/settings/plugin/PluginConfig.vue
@@ -13,7 +13,7 @@
           :title="$t('plugin.title')"
           @search="initPlugins"
           @import="importJar"
-          :show-import="true"/>
+          :show-import="true" :upload-permission="['SYSTEM_PLUGIN:UPLOAD']"/>
       </template>
 
       <el-table
@@ -44,13 +44,13 @@
                 :tip="$t('commons.delete')"
                 icon="el-icon-delete"
                 type="danger"
-                @exec="handleDelete(scope.row.id)"/>
+                @exec="handleDelete(scope.row.id)" v-permission="['SYSTEM_PLUGIN:DEL']"/>
             </div>
             <div v-else>
               <ms-table-operator-button
                 :tip="$t('plugin.script_view')"
                 icon="el-icon-view"
-                @exec="handleView(scope.row)"/>
+                @exec="handleView(scope.row)" v-permission="['SYSTEM_PLUGIN:VIEW']"/>
             </div>
           </template>
         </el-table-column>
diff --git a/frontend/src/business/components/settings/system/User.vue b/frontend/src/business/components/settings/system/User.vue
index 3088110c69..f85eefa1f4 100644
--- a/frontend/src/business/components/settings/system/User.vue
+++ b/frontend/src/business/components/settings/system/User.vue
@@ -4,7 +4,7 @@
     <el-card class="table-card">
       <template v-slot:header>
         <ms-table-header :create-permission="['SYSTEM_USER:READ+CREATE']" :condition.sync="condition" @search="search"
-                         @import="importUserDialogOpen" :show-import="true" :import-tip="$t('commons.import_user')"
+                         @import="importUserDialogOpen" :show-import="true" :upload-permission="['SYSTEM_USER:READ+CREATE']" :import-tip="$t('commons.import_user')"
                          :tip="$t('commons.search_by_name_or_id')" @create="create"
                          :create-tip="$t('user.create')" :title="$t('commons.user')"/>
       </template>