diff --git a/backend/src/main/java/io/metersphere/controller/UserController.java b/backend/src/main/java/io/metersphere/controller/UserController.java
index 50b1a34bc4..9a724fc608 100644
--- a/backend/src/main/java/io/metersphere/controller/UserController.java
+++ b/backend/src/main/java/io/metersphere/controller/UserController.java
@@ -70,6 +70,7 @@ public class UserController {
     }
 
     @PostMapping("/special/update_status")
+    @RequiresRoles(RoleConstants.ADMIN)
     public void updateStatus(@RequestBody User user) {
         userService.updateUser(user);
     }