diff --git a/system-setting/backend/src/main/java/io/metersphere/controller/UserController.java b/system-setting/backend/src/main/java/io/metersphere/controller/UserController.java
index 8083bd9d0e..d15d0bc854 100644
--- a/system-setting/backend/src/main/java/io/metersphere/controller/UserController.java
+++ b/system-setting/backend/src/main/java/io/metersphere/controller/UserController.java
@@ -157,11 +157,13 @@ public class UserController {
      */
     @PostMapping("/ws/member/add")
     @MsAuditLog(module = OperLogModule.WORKSPACE_MEMBER, type = OperLogConstants.CREATE, title = "添加工作空间成员")
+    @RequiresPermissions(PermissionConstants.WORKSPACE_USER_READ_CREATE)
     public void addMember(@RequestBody AddMemberRequest request) {
         userService.addWorkspaceMember(request);
     }
 
     @PostMapping("/project/member/add")
+    @RequiresPermissions(PermissionConstants.PROJECT_USER_READ_CREATE)
     public void addProjectMember(@RequestBody AddMemberRequest request) {
         userService.addProjectMember(request);
     }