diff --git a/backend/src/main/java/io/metersphere/base/mapper/ext/ExtUserRoleMapper.xml b/backend/src/main/java/io/metersphere/base/mapper/ext/ExtUserRoleMapper.xml
index 5b50199586..873a5e7229 100644
--- a/backend/src/main/java/io/metersphere/base/mapper/ext/ExtUserRoleMapper.xml
+++ b/backend/src/main/java/io/metersphere/base/mapper/ext/ExtUserRoleMapper.xml
@@ -30,6 +30,9 @@
\ No newline at end of file
diff --git a/backend/src/main/java/io/metersphere/controller/ProjectController.java b/backend/src/main/java/io/metersphere/controller/ProjectController.java
index acf07500a0..a9d414afb4 100644
--- a/backend/src/main/java/io/metersphere/controller/ProjectController.java
+++ b/backend/src/main/java/io/metersphere/controller/ProjectController.java
@@ -3,9 +3,11 @@ package io.metersphere.controller;
import com.github.pagehelper.Page;
import com.github.pagehelper.PageHelper;
import io.metersphere.base.domain.Project;
+import io.metersphere.commons.constants.RoleConstants;
import io.metersphere.commons.utils.PageUtils;
import io.metersphere.commons.utils.Pager;
import io.metersphere.service.ProjectService;
+import org.apache.shiro.authz.annotation.RequiresRoles;
import org.springframework.web.bind.annotation.*;
import javax.annotation.Resource;
@@ -24,22 +26,26 @@ public class ProjectController {
}
@PostMapping("/add")
+ @RequiresRoles(RoleConstants.TEST_MANAGER)
public Project addProject(@RequestBody Project project) {
return projectService.addProject(project);
}
@PostMapping("/list/{goPage}/{pageSize}")
+ @RequiresRoles(RoleConstants.TEST_MANAGER)
public Pager> getProjectList(@PathVariable int goPage, @PathVariable int pageSize) {
Page