diff --git a/ui/src/permission/modules/system/appearance.ts b/ui/src/permission/modules/system/appearance.ts
index 9a1b85760fe..1cd5525dad3 100644
--- a/ui/src/permission/modules/system/appearance.ts
+++ b/ui/src/permission/modules/system/appearance.ts
@@ -9,5 +9,8 @@ export default {
    * 系统「外观设置」只读权限
    */
   read: () => canSys(P.APPEARANCE_SETTINGS_READ) && hasEdition(Edition.PE),
+  /**
+   * 系统「外观设置」编辑权限
+   */
   edit: () => canSys(P.APPEARANCE_SETTINGS_EDIT)
  }
diff --git a/ui/src/permission/modules/system/chatUser.ts b/ui/src/permission/modules/system/chatUser.ts
index fe29812b8ae..9cbafd26927 100644
--- a/ui/src/permission/modules/system/chatUser.ts
+++ b/ui/src/permission/modules/system/chatUser.ts
@@ -8,10 +8,28 @@ export default {
    * 系统「对话用户」只读权限
    */
   read: () => hasPermission([RoleConstants.ADMIN,RoleConstants.WORKSPACE_MANAGE,P.CHAT_USER_READ],Compare.OR),
+    /**
+   * 系统「对话用户」创建权限
+   */
   create: () => hasPermission([RoleConstants.ADMIN,RoleConstants.WORKSPACE_MANAGE,P.CHAT_USER_CREATE],Compare.OR),
+    /**
+   * 系统「对话用户」同步权限
+   */
   sync: () => canSys(P.CHAT_USER_SYNC),
+    /**
+   * 系统「对话用户」编辑权限
+   */
   edit: () => hasPermission([RoleConstants.ADMIN,RoleConstants.WORKSPACE_MANAGE,P.CHAT_USER_EDIT],Compare.OR),
+    /**
+   * 系统「对话用户」删除权限
+   */
   delete: () => hasPermission([RoleConstants.ADMIN,RoleConstants.WORKSPACE_MANAGE,P.CHAT_USER_DELETE],Compare.OR),
+    /**
+   * 系统「对话用户」设置用户组权限
+   */
   userGroup: () => hasPermission([RoleConstants.ADMIN,RoleConstants.WORKSPACE_MANAGE,P.CHAT_USER_GROUP],Compare.OR),
+    /**
+   * 系统「对话用户」配额设置权限
+   */
   quotaSetting: () => canSys(P.CHAT_USER_QUOTA_SETTING),
 }
diff --git a/ui/src/permission/modules/system/chatUserGroup.ts b/ui/src/permission/modules/system/chatUserGroup.ts
index 5e55575044f..82561cfe084 100644
--- a/ui/src/permission/modules/system/chatUserGroup.ts
+++ b/ui/src/permission/modules/system/chatUserGroup.ts
@@ -1,6 +1,5 @@
 /** 系统「对话用户组」按钮权限。$perm.chatUserGroup.* */
 
-import { canSys } from '../../policy'
 import { PermissionConstants as P, hasPermission, RoleConstants, Compare} from '../../core'
 
 export default {
@@ -8,10 +7,24 @@ export default {
    * 系统「对话用户组」只读权限
    */
   read: () => hasPermission([RoleConstants.ADMIN,RoleConstants.WORKSPACE_MANAGE,P.USER_GROUP_READ],Compare.OR),
+    /**
+   * 系统「对话用户组」创建权限
+   */
   create: () => hasPermission([RoleConstants.ADMIN,RoleConstants.WORKSPACE_MANAGE,P.USER_GROUP_CREATE],Compare.OR),
+    /**
+   * 系统「对话用户组」编辑权限
+   */
   edit: () => hasPermission([RoleConstants.ADMIN,RoleConstants.WORKSPACE_MANAGE,P.USER_GROUP_EDIT],Compare.OR),
+    /**
+   * 系统「对话用户组」删除权限
+   */
   delete: () => hasPermission([RoleConstants.ADMIN,RoleConstants.WORKSPACE_MANAGE,P.USER_GROUP_DELETE],Compare.OR),
+    /**
+   * 系统「对话用户组」添加成员权限
+   */
   addMember: () => hasPermission([RoleConstants.ADMIN,RoleConstants.WORKSPACE_MANAGE,P.USER_GROUP_ADD_MEMBER],Compare.OR),
+    /**
+   * 系统「对话用户组」移除成员权限
+   */
   removeMember: () => hasPermission([RoleConstants.ADMIN,RoleConstants.WORKSPACE_MANAGE,P.USER_GROUP_REMOVE_MEMBER],Compare.OR),
-  authRead: () => canSys(P.CHAT_USER_AUTH_READ),
 }
diff --git a/ui/src/permission/modules/system/email.ts b/ui/src/permission/modules/system/email.ts
index 09bdc02ac84..e5c4f8b371d 100644
--- a/ui/src/permission/modules/system/email.ts
+++ b/ui/src/permission/modules/system/email.ts
@@ -7,4 +7,8 @@ export default {
   /**
    * 系统「邮箱设置」只读权限
    */
-  read: () => canSys(P.EMAIL_SETTING_READ), edit: () => canSys(P.EMAIL_SETTING_EDIT) }
+  read: () => canSys(P.EMAIL_SETTING_READ),
+  /**
+   * 系统「邮箱设置」编辑权限
+   */
+  edit: () => canSys(P.EMAIL_SETTING_EDIT) }
diff --git a/ui/src/permission/modules/system/loginAuth.ts b/ui/src/permission/modules/system/loginAuth.ts
index 9e33e8999f7..be6645d2446 100644
--- a/ui/src/permission/modules/system/loginAuth.ts
+++ b/ui/src/permission/modules/system/loginAuth.ts
@@ -9,5 +9,8 @@ export default {
    * 系统「用户认证」只读权限
    */
   read: () => canSys(P.LOGIN_AUTH_READ) && hasEdition(Edition.PE),
+  /**
+   * 系统「用户认证」编辑权限
+   */
   edit: () => canSys(P.LOGIN_AUTH_EDIT)
  }
diff --git a/ui/src/permission/modules/system/operationLog.ts b/ui/src/permission/modules/system/operationLog.ts
index 9e9d6aedefb..9803177d4c0 100644
--- a/ui/src/permission/modules/system/operationLog.ts
+++ b/ui/src/permission/modules/system/operationLog.ts
@@ -9,4 +9,12 @@ export default {
    * 系统「操作日志」只读权限
    */
   read: () => canSys(P.OPERATION_LOG_READ) && hasEdition(Edition.PE),
-  export: () => canSys(P.OPERATION_LOG_EXPORT), clearPolicy: () => canSys(P.OPERATION_LOG_CLEAR_POLICY) }
+  /**
+   * 系统「操作日志」导出权限
+   */
+  export: () => canSys(P.OPERATION_LOG_EXPORT),
+  /**
+   * 系统「操作日志」清除策略权限
+   */
+  clearPolicy: () => canSys(P.OPERATION_LOG_CLEAR_POLICY)
+}
diff --git a/ui/src/permission/modules/system/portal.ts b/ui/src/permission/modules/system/portal.ts
index c0b42d88019..e2a12a95d70 100644
--- a/ui/src/permission/modules/system/portal.ts
+++ b/ui/src/permission/modules/system/portal.ts
@@ -7,4 +7,8 @@ export default {
   /**
    * 系统「门户访问设置」只读权限
    */
-  read: () => canSys(P.PORTAL_READ), edit: () => canSys(P.PORTAL_EDIT) }
+  read: () => canSys(P.PORTAL_READ),
+  /**
+   * 系统「门户访问设置」编辑权限
+   */
+  edit: () => canSys(P.PORTAL_EDIT) }
diff --git a/ui/src/permission/modules/system/role.ts b/ui/src/permission/modules/system/role.ts
index b5d3184be0b..92f21645946 100644
--- a/ui/src/permission/modules/system/role.ts
+++ b/ui/src/permission/modules/system/role.ts
@@ -9,9 +9,24 @@ export default {
    * 系统「角色管理」只读权限
    * */
   read: () => hasPermission([RoleConstants.ADMIN,RoleConstants.WORKSPACE_MANAGE,P.ROLE_READ],Compare.OR) && hasEdition(Edition.PE),
+  /**
+   * 系统「角色管理」创建权限
+   */
   create: () => canSys(P.ROLE_CREATE),
+  /**
+   * 系统「角色管理」编辑权限
+   */
   edit: () => canSys(P.ROLE_EDIT),
+  /**
+   * 系统「角色管理」删除权限
+   */
   delete: () => canSys(P.ROLE_DELETE),
+  /**
+   * 系统「角色管理」添加成员权限
+   */
   addMember: () => hasPermission([RoleConstants.ADMIN,RoleConstants.WORKSPACE_MANAGE,P.ROLE_ADD_MEMBER],Compare.OR),
+  /**
+   * 系统「角色管理」移除成员权限
+   */
   removeMember: () => hasPermission([RoleConstants.ADMIN,RoleConstants.WORKSPACE_MANAGE,P.ROLE_REMOVE_MEMBER],Compare.OR),
 }
diff --git a/ui/src/permission/modules/system/user.ts b/ui/src/permission/modules/system/user.ts
index 19916b45e59..68e422bcf6e 100644
--- a/ui/src/permission/modules/system/user.ts
+++ b/ui/src/permission/modules/system/user.ts
@@ -8,9 +8,24 @@ export default {
    * 系统「用户管理」只读权限
    * */
   read: () => canSys(P.USER_READ),
+  /**
+   * 系统「用户管理」创建权限
+   */
   create: () => canSys(P.USER_CREATE),
+  /**
+   * 系统「用户管理」编辑权限
+   */
   edit: () => canSys(P.USER_EDIT),
+  /**
+   * 系统「用户管理」删除权限
+   */
   delete: () => canSys(P.USER_DELETE),
+  /**
+   * 系统「用户管理」设置角色权限
+   */
   setRole: () => canSys(P.USER_SET_ROLE),
+  /**
+   * 系统「用户管理」导入权限
+   */
   import: () => canSys(P.USER_IMPORT),
 }
diff --git a/ui/src/permission/modules/system/userGroup.ts b/ui/src/permission/modules/system/userGroup.ts
index ea125023db4..83b04fc7c94 100644
--- a/ui/src/permission/modules/system/userGroup.ts
+++ b/ui/src/permission/modules/system/userGroup.ts
@@ -7,9 +7,24 @@ export default {
    * 系统「用户组」只读权限
    * */
   read: () => hasPermission([RoleConstants.ADMIN,RoleConstants.WORKSPACE_MANAGE,P.SYSTEM_USER_GROUP_READ],Compare.OR),
+  /**
+   * 系统「用户组」创建权限
+   */
   create: () => hasPermission([RoleConstants.ADMIN,RoleConstants.WORKSPACE_MANAGE,P.SYSTEM_USER_GROUP_CREATE],Compare.OR),
+  /**
+   * 系统「用户组」编辑权限
+   */
   edit: () => hasPermission([RoleConstants.ADMIN,RoleConstants.WORKSPACE_MANAGE,P.SYSTEM_USER_GROUP_EDIT],Compare.OR),
+  /**
+   * 系统「用户组」删除权限
+   */
   delete: () => hasPermission([RoleConstants.ADMIN,RoleConstants.WORKSPACE_MANAGE,P.SYSTEM_USER_GROUP_DELETE],Compare.OR),
+  /**
+   * 系统「用户组」添加成员权限
+   */
   addMember: () => hasPermission([RoleConstants.ADMIN,RoleConstants.WORKSPACE_MANAGE,P.SYSTEM_USER_GROUP_ADD_MEMBER],Compare.OR),
+  /**
+   * 系统「用户组」移除成员权限
+   */
   removeMember: () => hasPermission([RoleConstants.ADMIN,RoleConstants.WORKSPACE_MANAGE,P.SYSTEM_USER_GROUP_REMOVE_MEMBER],Compare.OR),
 }
diff --git a/ui/src/permission/modules/system/workspace.ts b/ui/src/permission/modules/system/workspace.ts
index 944fb5c80ed..1722bea484a 100644
--- a/ui/src/permission/modules/system/workspace.ts
+++ b/ui/src/permission/modules/system/workspace.ts
@@ -9,9 +9,24 @@ export default {
    * 系统「工作空间」只读权限
    * */
   read: () => hasPermission([RoleConstants.ADMIN,RoleConstants.WORKSPACE_MANAGE,P.WORKSPACE_READ],Compare.OR) && hasEdition(Edition.PE),
+  /**
+   * 系统「工作空间」创建权限
+   */
   create: () => canSys(P.WORKSPACE_CREATE),
+  /**
+   * 系统「工作空间」编辑权限
+   */
   edit: () => canSys(P.WORKSPACE_EDIT),
+  /**
+   * 系统「工作空间」删除权限
+   */
   delete: () => canSys(P.WORKSPACE_DELETE),
+  /**
+   * 系统「工作空间」添加成员权限
+   */
   addMember: () => hasPermission([RoleConstants.ADMIN,RoleConstants.WORKSPACE_MANAGE,P.WORKSPACE_ADD_MEMBER],Compare.OR),
+  /**
+   * 系统「工作空间」移除成员权限
+   */
   removeMember: () => hasPermission([RoleConstants.ADMIN,RoleConstants.WORKSPACE_MANAGE,P.WORKSPACE_REMOVE_MEMBER],Compare.OR),
 }
diff --git a/ui/src/views/system/chat-management/authentication/EditSCANDrawer.vue b/ui/src/views/system/chat-management/authentication/EditSCANDrawer.vue
index ce3c33d0ab8..b49a6379128 100644
--- a/ui/src/views/system/chat-management/authentication/EditSCANDrawer.vue
+++ b/ui/src/views/system/chat-management/authentication/EditSCANDrawer.vue
@@ -6,6 +6,7 @@ import type { FormInstance, FormRules } from 'element-plus'
 import { LOGIN_METHOD_LABELS, SCAN_FIELD_LABELS } from '@/constants'
 import { LOGIN_METHOD } from '@/api/enums'
 import { MsgSuccess, MsgError } from '@/utils/message'
+import perm from '@/permission'
 
 const emit = defineEmits<{ refresh: [] }>()
 const visible = ref(false)
@@ -82,7 +83,7 @@ defineExpose({ open })
       <!-- 校验 -->
       <el-button plain @click="handleValidatePlatform">校验</el-button>
       <!-- 保存 -->
-      <el-button type="primary" @click="submit">保存</el-button>
+      <el-button v-if="perm.system.chatAuth.edit()" type="primary" @click="submit">保存</el-button>
     </template>
   </MkDrawer>
 </template>
diff --git a/ui/src/views/system/chat-management/authentication/components/CAS.vue b/ui/src/views/system/chat-management/authentication/components/CAS.vue
index 83412d7ed37..ec3cebf5974 100644
--- a/ui/src/views/system/chat-management/authentication/components/CAS.vue
+++ b/ui/src/views/system/chat-management/authentication/components/CAS.vue
@@ -5,6 +5,7 @@ import ChatUserAuthApi from '@/api/admin/system/chat-management/chat-user-auth'
 import { LOGIN_METHOD } from '@/api/enums'
 import type { AuthProviderSettingPayload } from '@/api/types'
 import { MsgSuccess } from '@/utils/message'
+import perm from '@/permission'
 
 defineOptions({ name: 'CasAuthenticationSetting' })
 
@@ -72,6 +73,6 @@ onMounted(() => loadSetting)
         <el-switch v-model="form.is_active" class="self-start" />
       </div>
     </el-form-item>
-    <el-button type="primary" @click="submit">保存</el-button>
+    <el-button v-if="perm.system.chatAuth.edit()" type="primary" @click="submit">保存</el-button>
   </el-form>
 </template>
diff --git a/ui/src/views/system/chat-management/authentication/components/LDAP.vue b/ui/src/views/system/chat-management/authentication/components/LDAP.vue
index b75f873844c..4246a96ae40 100644
--- a/ui/src/views/system/chat-management/authentication/components/LDAP.vue
+++ b/ui/src/views/system/chat-management/authentication/components/LDAP.vue
@@ -5,6 +5,7 @@ import ChatUserAuthApi from '@/api/admin/system/chat-management/chat-user-auth'
 import { LOGIN_METHOD } from '@/api/enums'
 import type { AuthProviderSettingPayload } from '@/api/types'
 import { MsgSuccess } from '@/utils/message'
+import perm from '@/permission'
 
 defineOptions({ name: 'LdapAuthenticationSetting' })
 const authFormRef = useTemplateRef<FormInstance>('authFormRef')
@@ -75,7 +76,7 @@ onMounted(() => loadSetting())
     </el-form-item>
     <div>
       <!-- 保存 -->
-      <el-button type="primary" @click="submit('save')">保存</el-button>
+      <el-button v-if="perm.system.chatAuth.edit()" type="primary" @click="submit('save')">保存</el-button>
       <!-- 测试连接 -->
       <el-button plain @click="submit('test')">测试连接</el-button>
     </div>
diff --git a/ui/src/views/system/chat-management/authentication/components/OAuth2.vue b/ui/src/views/system/chat-management/authentication/components/OAuth2.vue
index 6cb3b8a393e..853c50cf2a9 100644
--- a/ui/src/views/system/chat-management/authentication/components/OAuth2.vue
+++ b/ui/src/views/system/chat-management/authentication/components/OAuth2.vue
@@ -5,6 +5,7 @@ import ChatUserAuthApi from '@/api/admin/system/chat-management/chat-user-auth'
 import { LOGIN_METHOD } from '@/api/enums'
 import type { AuthProviderSettingPayload } from '@/api/types'
 import { MsgSuccess } from '@/utils/message'
+import perm from '@/permission'
 
 defineOptions({ name: 'OidcAuthenticationSetting' })
 const defaultRedirectUrl = `${window.location.origin}${window.MaxKB?.prefix ?? ''}/api/oauth2`
@@ -77,6 +78,6 @@ onMounted(() => loadSetting())
       ><div class="flex-column"><span>启用 OAuth2 认证</span><el-switch v-model="form.is_active" class="self-start" /></div
     ></el-form-item>
     <!-- 保存 -->
-    <el-button type="primary" @click="submit">保存</el-button>
+    <el-button v-if="perm.system.chatAuth.edit()" type="primary" @click="submit">保存</el-button>
   </el-form>
 </template>
diff --git a/ui/src/views/system/chat-management/authentication/components/OIDC.vue b/ui/src/views/system/chat-management/authentication/components/OIDC.vue
index 4f74c1412cd..fe65a2bcdcc 100644
--- a/ui/src/views/system/chat-management/authentication/components/OIDC.vue
+++ b/ui/src/views/system/chat-management/authentication/components/OIDC.vue
@@ -5,6 +5,7 @@ import ChatUserAuthApi from '@/api/admin/system/chat-management/chat-user-auth'
 import { LOGIN_METHOD } from '@/api/enums'
 import type { AuthProviderSettingPayload } from '@/api/types'
 import { MsgSuccess } from '@/utils/message'
+import perm from '@/permission'
 
 defineOptions({ name: 'OidcAuthenticationSetting' })
 const defaultFieldMapping = '{"username":"preferred_username","email":"email"}'
@@ -96,6 +97,6 @@ onMounted(() => loadSetting())
       ><div class="flex-column"><span>启用 OIDC 认证</span><el-switch v-model="form.is_active" class="self-start" /></div
     ></el-form-item>
     <!-- 保存 -->
-    <el-button type="primary" @click="submit">保存</el-button>
+    <el-button v-if="perm.system.chatAuth.edit()" type="primary" @click="submit">保存</el-button>
   </el-form>
 </template>
diff --git a/ui/src/views/system/chat-management/portal-setting/PortalSettingView.vue b/ui/src/views/system/chat-management/portal-setting/PortalSettingView.vue
index 2c5b9d484f1..d5036dc5c74 100644
--- a/ui/src/views/system/chat-management/portal-setting/PortalSettingView.vue
+++ b/ui/src/views/system/chat-management/portal-setting/PortalSettingView.vue
@@ -9,6 +9,7 @@ import PortalPreview from './components/PortalPreview.vue'
 import ButtonEditPortal from './components/ButtonEditPortal.vue'
 import ButtonPortalAuthSetting from './components/ButtonPortalAuthSetting.vue'
 import ButtonPortalCorsSetting from './components/ButtonPortalCorsSetting.vue'
+import perm from '@/permission/index.ts'
 
 type AccessField = 'enable_public_access' | 'enable_api' | 'enable_knowledge_base_api' | 'enable_auth' | 'enable_cors'
 
@@ -86,7 +87,7 @@ const previewLogo = computed(() => portalSetting.logo)
             <h4 class="truncate" :title="previewName">{{ previewName }}</h4>
           </div>
           <!-- 编辑门户名称与 Logo -->
-          <ButtonEditPortal ref="editPortalButtonRef" :setting="portalSetting" :saving="saving" :save="savePortalSetting" />
+          <ButtonEditPortal v-if="perm.system.portal.edit()" ref="editPortalButtonRef" :setting="portalSetting" :saving="saving" :save="savePortalSetting" />
         </el-card>
         <el-card shadow="never">
           <div class="space-y-4">
diff --git a/ui/src/views/system/chat-management/user-groups/GroupsListView.vue b/ui/src/views/system/chat-management/user-groups/GroupsListView.vue
index 21d9a23387d..0b2ba1a4af9 100644
--- a/ui/src/views/system/chat-management/user-groups/GroupsListView.vue
+++ b/ui/src/views/system/chat-management/user-groups/GroupsListView.vue
@@ -8,6 +8,7 @@ import { MsgConfirm, MsgSuccess } from '@/utils/message'
 import MkSearchList from '@/components/mk-search-list/index.vue'
 import CreateGroupMemberDialog from './dialog/CreateGroupMemberDialog.vue'
 import CreateOrUpdateGroupDialog from './dialog/CreateOrUpdateGroupDialog.vue'
+import perm from '@/permission/index.ts'
 
 /* 添加用户组表单dialog */
 const groupDialogRef = useTemplateRef<InstanceType<typeof CreateOrUpdateGroupDialog>>('groupDialogRef')
@@ -136,7 +137,7 @@ onMounted(() => loadChatUserGroups())
         <h4>{{ title }}</h4>
         <!-- 创建用户组 -->
         <MkTooltip content="创建用户组" placement="top">
-          <el-button text type="primary" @click="handleOpenGroupDialog()">
+          <el-button v-if="perm.system.chatUserGroup.create()" text type="primary" @click="handleOpenGroupDialog()">
             <MkIcon name="icon_add_outlined" :size="18" />
           </el-button>
         </MkTooltip>
@@ -144,12 +145,12 @@ onMounted(() => loadChatUserGroups())
       <MkSearchList :data="chatUserGroups" :default-active="currentGroup?.id" @click="handleGroupSelect">
         <template #action-dropdown="{ row }">
           <!-- 重命名用户组 -->
-          <MkDropdownItem @click="handleOpenGroupDialog(row)">
+          <MkDropdownItem v-if="perm.system.chatUserGroup.edit()" @click="handleOpenGroupDialog(row)">
             <template #icon><MkIcon name="icon_rename_outlined" /></template>
             <span>重命名</span>
           </MkDropdownItem>
           <!-- 删除用户组 -->
-          <MkDropdownItem divided @click="deleteGroup(row)">
+          <MkDropdownItem v-if="perm.system.chatUserGroup.delete()" divided @click="deleteGroup(row)">
             <template #icon><MkIcon name="icon_delete-trash_outlined" /></template>
             <span>删除</span>
           </MkDropdownItem>
@@ -172,7 +173,7 @@ onMounted(() => loadChatUserGroups())
         <div class="flex-between mb-4">
           <div>
             <!-- 添加成员 -->
-            <el-button type="primary" @click="handleOpenMemberDialog">
+            <el-button v-if="perm.system.chatUserGroup.addMember()" type="primary" @click="handleOpenMemberDialog">
               <MkIcon name="icon_add_outlined" />
               <span>添加成员</span>
             </el-button>
@@ -203,7 +204,7 @@ onMounted(() => loadChatUserGroups())
             <template #default="{ row }">
               <!-- 移除成员 -->
               <MkTooltip content="移除" placement="top">
-                <el-button type="primary" text @click="handleRemoveMembers(row)">
+                <el-button v-if="perm.system.chatUserGroup.removeMember()" type="primary" text @click="handleRemoveMembers(row)">
                   <MkIcon name="icon_assigned_outlined" />
                 </el-button>
               </MkTooltip>
@@ -211,7 +212,7 @@ onMounted(() => loadChatUserGroups())
           </el-table-column>
           <template #footer-batch-actions>
             <!-- 批量移除成员 -->
-            <el-button type="danger" plain @click="handleRemoveMembers()">移除</el-button>
+            <el-button v-if="perm.system.chatUserGroup.removeMember()" type="danger" plain @click="handleRemoveMembers()">移除</el-button>
           </template>
         </MkTable>
       </template>
diff --git a/ui/src/views/system/chat-management/users/UserListView.vue b/ui/src/views/system/chat-management/users/UserListView.vue
index fbd23e5131d..4c0dc40b978 100644
--- a/ui/src/views/system/chat-management/users/UserListView.vue
+++ b/ui/src/views/system/chat-management/users/UserListView.vue
@@ -12,6 +12,7 @@ import ButtonImportUsers from './import-users/ButtonImportUsers.vue'
 import ButtonChangeUserPassword from './user-password/ButtonChangeUserPassword.vue'
 import ButtonBatchSetUserGroup from './batch-set-user-group/ButtonBatchSetUserGroup.vue'
 import ButtonQuotaSettings from './quota-settings/ButtonQuotaSettings.vue'
+import perm from '@/permission/index.ts'
 
 /* 添加编辑用户表单drawer */
 const userFormDrawerRef = ref<InstanceType<typeof UserFromDrawer>>()
@@ -137,9 +138,9 @@ onMounted(() => loadChatUsers())
         <div class="flex-align-center">
           <MkComplexSearch :fields="searchFields" @change="handleSearchChange" />
           <!-- 导入用户 -->
-          <ButtonImportUsers @refresh="loadChatUsers(true)" />
+          <ButtonImportUsers v-if="perm.system.chatUser.sync()" @refresh="loadChatUsers(true)" />
           <!-- 创建用户 -->
-          <el-button type="primary" @click="handleOpenUserFormDrawer()">
+          <el-button v-if="perm.system.chatUser.create()" type="primary" @click="handleOpenUserFormDrawer()">
             <MkIcon name="icon_add_outlined" />
             <span>创建用户</span>
           </el-button>
@@ -214,7 +215,7 @@ onMounted(() => loadChatUsers())
               <div class="flex">
                 <!-- 编辑 -->
                 <MkTooltip content="编辑" placement="top">
-                  <el-button type="primary" text @click.stop="handleOpenUserFormDrawer(row)">
+                  <el-button v-if="perm.system.chatUser.edit()" type="primary" text @click.stop="handleOpenUserFormDrawer(row)">
                     <MkIcon name="icon_edit_outlined" />
                   </el-button>
                 </MkTooltip>
@@ -223,9 +224,9 @@ onMounted(() => loadChatUsers())
                 <!-- 更多 -->
                 <MkTableMoreDropdown class="ml-1" persistent>
                   <!-- 配额设置 -->
-                  <ButtonQuotaSettings :user-ids="row.id" dropdown @refresh="loadChatUsers()" />
+                  <ButtonQuotaSettings v-if="perm.system.chatUser.quotaSetting()" :user-ids="row.id" dropdown @refresh="loadChatUsers()" />
                   <!-- 删除 -->
-                  <MkDropdownItem divided @click="deleteUser(row)">
+                  <MkDropdownItem v-if="perm.system.chatUser.delete()" divided @click="deleteUser(row)">
                     <template #icon>
                       <MkIcon name="icon_delete-trash_outlined" />
                     </template>
@@ -239,11 +240,11 @@ onMounted(() => loadChatUsers())
 
         <template #footer-batch-actions>
           <!-- 批量设置用户组 -->
-          <ButtonBatchSetUserGroup :user-ids="batchSelectedUsers.map(({ id }) => id)" @refresh="loadChatUsers(false)" />
+          <ButtonBatchSetUserGroup v-if="perm.system.chatUser.userGroup()" :user-ids="batchSelectedUsers.map(({ id }) => id)" @refresh="loadChatUsers(false)" />
           <!-- 批量配额设置-->
-          <ButtonQuotaSettings :user-ids="batchSelectedUsers.map(({ id }) => id)" @refresh="loadChatUsers()" />
+          <ButtonQuotaSettings v-if="perm.system.chatUser.quotaSetting()" :user-ids="batchSelectedUsers.map(({ id }) => id)" @refresh="loadChatUsers()" />
           <!-- 批量删除-->
-          <el-button type="danger" plain @click="handleBatchDelete">删除</el-button>
+          <el-button v-if="perm.system.chatUser.delete()" type="danger" plain @click="handleBatchDelete">删除</el-button>
         </template>
       </MkTable>
     </template>
diff --git a/ui/src/views/system/identity/groups/GroupsListView.vue b/ui/src/views/system/identity/groups/GroupsListView.vue
index 44832838fa1..34b43726102 100644
--- a/ui/src/views/system/identity/groups/GroupsListView.vue
+++ b/ui/src/views/system/identity/groups/GroupsListView.vue
@@ -9,6 +9,7 @@ import MkSearchList from '@/components/mk-search-list/index.vue'
 import CreateOrUpdateGroupDialog from './dialog/CreateOrUpdateGroupDialog.vue'
 import CreateGroupMemberDialog from './dialog/CreateGroupMemberDialog.vue'
 import { useStore } from '@/stores'
+import perm from '@/permission/index.ts'
 const { auth } = useStore()
 
 /* 选择工作空间列表 */
@@ -179,7 +180,7 @@ onMounted(() => {
       <component :is="Header">
         <h4>{{ title }}</h4>
         <!-- 创建用户组 -->
-        <MkTooltip content="创建用户组" placement="top">
+        <MkTooltip v-if="perm.system.userGroup.create()" content="创建用户组" placement="top">
           <el-button class="-mr-1" text type="primary" @click="handleOpenGroupDialog()">
             <MkIcon name="icon_add_outlined" :size="18" />
           </el-button>
@@ -188,14 +189,14 @@ onMounted(() => {
       <MkSearchList v-loading="loadingGroups" :data="userGroups" :default-active="currentGroup?.id" @click="handleGroupSelect">
         <template #action-dropdown="{ row }">
           <!-- 重命名用户组 -->
-          <MkDropdownItem @click="handleOpenGroupDialog(row)">
+          <MkDropdownItem v-if="perm.system.userGroup.edit()" @click="handleOpenGroupDialog(row)">
             <template #icon>
               <MkIcon name="icon_rename_outlined" />
             </template>
             <span>重命名</span>
           </MkDropdownItem>
           <!-- 删除用户组 -->
-          <MkDropdownItem divided @click="deleteGroup(row)">
+          <MkDropdownItem v-if="perm.system.userGroup.delete()" divided @click="deleteGroup(row)">
             <template #icon>
               <MkIcon name="icon_delete-trash_outlined" />
             </template>
@@ -221,7 +222,7 @@ onMounted(() => {
         <div class="flex-between mb-4">
           <div>
             <!-- 添加成员 -->
-            <el-button type="primary" @click="handleOpenMemberDialog">
+            <el-button v-if="perm.system.userGroup.addMember()" type="primary" @click="handleOpenMemberDialog">
               <MkIcon name="icon_add_outlined" />
               <span>添加成员</span>
             </el-button>
@@ -250,7 +251,7 @@ onMounted(() => {
             <template #default="{ row }">
               <!-- 移除成员 -->
               <MkTooltip content="移除" placement="top">
-                <el-button type="primary" text @click="handleRemoveMembers(row)">
+                <el-button v-if="perm.system.userGroup.removeMember()" type="primary" text @click="handleRemoveMembers(row)">
                   <MkIcon name="icon_assigned_outlined" />
                 </el-button>
               </MkTooltip>
@@ -258,7 +259,7 @@ onMounted(() => {
           </el-table-column>
           <template #footer-batch-actions>
             <!-- 批量移除成员 -->
-            <el-button type="danger" plain @click="handleRemoveMembers()">移除</el-button>
+            <el-button v-if="perm.system.userGroup.removeMember()" type="danger" plain @click="handleRemoveMembers()">移除</el-button>
           </template>
         </MkTable>
       </template>
diff --git a/ui/src/views/system/identity/roles/RoleListView.vue b/ui/src/views/system/identity/roles/RoleListView.vue
index 868fb9ce493..496b47bd47c 100644
--- a/ui/src/views/system/identity/roles/RoleListView.vue
+++ b/ui/src/views/system/identity/roles/RoleListView.vue
@@ -7,6 +7,7 @@ import { MsgConfirm, MsgSuccess } from '@/utils/message'
 import RoleMemberList from './components/RoleMemberList.vue'
 import RolePermissionConfiguration from './components/RolePermissionConfiguration.vue'
 import CreateOrUpdateRoleDialog from './dialog/CreateOrUpdateRoleDialog.vue'
+import perm from '@/permission/index.ts'
 
 type RoleDetailTab = 'permission' | 'member'
 const currentTab = ref<RoleDetailTab>('permission')
@@ -84,7 +85,7 @@ onMounted(() => loadRoles())
         <h4>{{ title }}</h4>
         <MkTooltip content="创建角色" placement="top">
           <!-- 创建角色 -->
-          <el-button class="-mr-1" text type="primary" @click="handleOpenRoleDialog()">
+          <el-button v-if="perm.system.role.create()" class="-mr-1" text type="primary" @click="handleOpenRoleDialog()">
             <MkIcon name="icon_add_outlined" :size="18" />
           </el-button>
         </MkTooltip>
@@ -119,11 +120,11 @@ onMounted(() => loadRoles())
                 </template>
                 <template v-if="!role.internal" #action-dropdown>
                   <!-- 重命名 -->
-                  <MkDropdownItem @click="handleOpenRoleDialog(role)">
+                  <MkDropdownItem v-if="perm.system.role.edit()" @click="handleOpenRoleDialog(role)">
                     <template #icon><MkIcon name="icon_rename_outlined" /></template>重命名
                   </MkDropdownItem>
                   <!-- 删除 -->
-                  <MkDropdownItem divided @click="handleDeleteRole(role)">
+                  <MkDropdownItem v-if="perm.system.role.delete()" divided @click="handleDeleteRole(role)">
                     <template #icon><MkIcon name="icon_delete-trash_outlined" /></template>删除
                   </MkDropdownItem>
                 </template>
diff --git a/ui/src/views/system/identity/roles/components/RoleMemberList.vue b/ui/src/views/system/identity/roles/components/RoleMemberList.vue
index 4771aacbcf0..6d883da43f1 100644
--- a/ui/src/views/system/identity/roles/components/RoleMemberList.vue
+++ b/ui/src/views/system/identity/roles/components/RoleMemberList.vue
@@ -5,6 +5,7 @@ import { ROLE_TYPE } from '@/api/enums'
 import type { Dict, OptionItem, RoleItem, RoleMember } from '@/api/types'
 import { MsgConfirm, MsgSuccess } from '@/utils/message'
 import AddMemberDrawer from '../AddMemberDrawer.vue'
+import perm from '@/permission/index.ts'
 
 const props = defineProps<{ currentRole: RoleItem }>()
 const loading = ref(false)
@@ -95,7 +96,7 @@ watch(
     <div class="flex-between mb-4">
       <div>
         <!-- 添加成员 -->
-        <el-button type="primary" @click="handleOpenAddMemberDrawer"> <MkIcon name="icon_add_outlined" />添加成员 </el-button>
+        <el-button type="primary" v-if="perm.system.workspace.addMember()" @click="handleOpenAddMemberDrawer"> <MkIcon name="icon_add_outlined" />添加成员 </el-button>
       </div>
 
       <MkComplexSearch :fields="searchFields" @change="handleSearch" />
@@ -117,12 +118,12 @@ watch(
       <el-table-column label="操作" width="70" fixed="right">
         <template #default="{ row }">
           <MkTooltip content="移除" placement="top">
-            <el-button type="primary" text @click="handleRemoveMember(row)"><MkIcon name="icon_assigned_outlined" /></el-button>
+            <el-button v-if="perm.system.workspace.removeMember()" type="primary" text @click="handleRemoveMember(row)"><MkIcon name="icon_assigned_outlined" /></el-button>
           </MkTooltip>
         </template>
       </el-table-column>
       <template #footer-batch-actions>
-        <el-button type="danger" plain @click="handleBatchDelete">移除</el-button>
+        <el-button v-if="perm.system.workspace.removeMember()" type="danger" plain @click="handleBatchDelete">移除</el-button>
       </template>
     </MkTable>
   </div>
diff --git a/ui/src/views/system/identity/users/UserListView.vue b/ui/src/views/system/identity/users/UserListView.vue
index 7aaa55594fa..c33949d29d1 100644
--- a/ui/src/views/system/identity/users/UserListView.vue
+++ b/ui/src/views/system/identity/users/UserListView.vue
@@ -12,6 +12,7 @@ import UserFromDrawer from './UserFromDrawer.vue'
 import ButtonImportUsers from './import-users/ButtonImportUsers.vue'
 import ButtonChangeUserPassword from './user-password/ButtonChangeUserPassword.vue'
 import ButtonBatchSetUserRole from './batch-set-user-role/ButtonBatchSetUserRole.vue'
+import perm from '@/permission/index.ts'
 
 const { auth, user } = useStore()
 
@@ -128,9 +129,9 @@ onMounted(() => loadSystemUsers())
         <div class="flex-align-center">
           <MkComplexSearch :fields="searchFields" @change="handleSearchChange" />
           <!-- 导入用户 -->
-          <ButtonImportUsers @refresh="loadSystemUsers()" />
+          <ButtonImportUsers v-if="perm.system.user.import()" @refresh="loadSystemUsers()" />
           <!-- 创建用户 -->
-          <el-button type="primary" @click="handleOpenUserFormDrawer()">
+          <el-button v-if="perm.system.user.create()" type="primary" @click="handleOpenUserFormDrawer()">
             <MkIcon name="icon_add_outlined" />
             <span>创建用户</span>
           </el-button>
@@ -222,7 +223,7 @@ onMounted(() => loadSystemUsers())
               <div class="flex">
                 <!-- 编辑 -->
                 <MkTooltip content="编辑" placement="top">
-                  <el-button type="primary" text @click.stop="handleOpenUserFormDrawer(row)">
+                  <el-button v-if="perm.system.user.edit()" type="primary" text @click.stop="handleOpenUserFormDrawer(row)">
                     <MkIcon name="icon_edit_outlined" />
                   </el-button>
                 </MkTooltip>
@@ -230,7 +231,7 @@ onMounted(() => loadSystemUsers())
                 <ButtonChangeUserPassword :user="row" @refresh="loadSystemUsers(false)" />
                 <!-- 删除 -->
                 <MkTooltip content="删除" placement="top">
-                  <el-button type="primary" text @click.stop="deleteUser(row)">
+                  <el-button v-if="perm.system.user.delete()" type="primary" text @click.stop="deleteUser(row)">
                     <MkIcon name="icon_delete-trash_outlined" />
                   </el-button>
                 </MkTooltip>
@@ -242,12 +243,12 @@ onMounted(() => loadSystemUsers())
         <template #footer-batch-actions>
           <!-- 批量设置角色 -->
           <ButtonBatchSetUserRole
-            v-if="auth.isEE || auth.isPE"
+            v-if="(auth.isEE || auth.isPE) && perm.system.user.setRole()"
             :user-ids="batchSelectedUsers.map(({ id }) => id)"
             @refresh="loadSystemUsers(false)"
           />
           <!-- 批量删除 -->
-          <el-button type="danger" plain @click="handleBatchDelete">删除</el-button>
+          <el-button v-if="perm.system.user.delete()" type="danger" plain @click="handleBatchDelete">删除</el-button>
         </template>
       </MkTable>
     </template>
diff --git a/ui/src/views/system/identity/workspaces/WorkspaceListView.vue b/ui/src/views/system/identity/workspaces/WorkspaceListView.vue
index 4e698b347da..87c56fe204c 100644
--- a/ui/src/views/system/identity/workspaces/WorkspaceListView.vue
+++ b/ui/src/views/system/identity/workspaces/WorkspaceListView.vue
@@ -7,6 +7,7 @@ import MkSearchList from '@/components/mk-search-list/index.vue'
 import { MsgConfirm, MsgSuccess } from '@/utils/message'
 import AddMemberDrawer from './AddMemberDrawer.vue'
 import CreateOrUpdateWorkspaceDialog from './dialog/CreateOrUpdateWorkspaceDialog.vue'
+import perm from '@/permission/index.ts'
 
 /* 添加工作空间表单dialog */
 const workspaceDialogRef = useTemplateRef<InstanceType<typeof CreateOrUpdateWorkspaceDialog>>('workspaceDialogRef')
@@ -177,7 +178,7 @@ onMounted(() => loadWorkspaceOptions())
         <h4>{{ title }}</h4>
         <!-- 创建工作空间 -->
         <MkTooltip content="创建工作空间" placement="top">
-          <el-button text type="primary" class="-mr-1" @click="handleOpenWorkspaceDialog()">
+          <el-button v-if="perm.system.workspace.create()" text type="primary" class="-mr-1" @click="handleOpenWorkspaceDialog()">
             <MkIcon name="icon_add_outlined" :size="18" />
           </el-button>
         </MkTooltip>
@@ -185,14 +186,14 @@ onMounted(() => loadWorkspaceOptions())
       <MkSearchList :data="workspacesList" :default-active="currentWorkspace?.id" @click="handleWorkspaceSelect">
         <template #action-dropdown="{ row: workspace }">
           <!-- 重命名工作空间 -->
-          <MkDropdownItem @click="handleOpenWorkspaceDialog(workspace)">
+          <MkDropdownItem v-if="perm.system.workspace.edit()" @click="handleOpenWorkspaceDialog(workspace)">
             <template #icon>
               <MkIcon name="icon_rename_outlined" />
             </template>
             <span>重命名</span>
           </MkDropdownItem>
           <!-- 删除工作空间 -->
-          <MkDropdownItem divided @click="handleWorkspaceDelete(workspace)">
+          <MkDropdownItem v-if="perm.system.workspace.delete()" divided @click="handleWorkspaceDelete(workspace)">
             <template #icon>
               <MkIcon name="icon_delete-trash_outlined" />
             </template>
@@ -220,7 +221,7 @@ onMounted(() => loadWorkspaceOptions())
         <div class="flex-between mb-4">
           <div>
             <!-- 添加成员 -->
-            <el-button type="primary" @click="handleOpenAddMemberDrawer">
+            <el-button v-if="perm.system.workspace.addMember()" type="primary" @click="handleOpenAddMemberDrawer">
               <MkIcon name="icon_add_outlined" />
               <span>添加成员</span>
             </el-button>
@@ -248,7 +249,7 @@ onMounted(() => loadWorkspaceOptions())
             <template #default="{ row }">
               <!-- 移除成员 -->
               <MkTooltip content="移除" placement="top">
-                <el-button type="primary" text @click="handleRemoveMember(row)">
+                <el-button v-if="perm.system.workspace.removeMember()" type="primary" text @click="handleRemoveMember(row)">
                   <MkIcon name="icon_assigned_outlined" />
                 </el-button>
               </MkTooltip>
@@ -257,7 +258,7 @@ onMounted(() => loadWorkspaceOptions())
 
           <template #footer-batch-actions>
             <!-- 批量移除成员 -->
-            <el-button type="danger" plain @click="handleBatchDelete">移除</el-button>
+            <el-button v-if="perm.system.workspace.removeMember()" type="danger" plain @click="handleBatchDelete">移除</el-button>
           </template>
         </MkTable>
       </template>
diff --git a/ui/src/views/system/operate-logs/OperateLogListView.vue b/ui/src/views/system/operate-logs/OperateLogListView.vue
index 2086fa0d79a..2cc3e873191 100644
--- a/ui/src/views/system/operate-logs/OperateLogListView.vue
+++ b/ui/src/views/system/operate-logs/OperateLogListView.vue
@@ -9,6 +9,7 @@ import ButtonCleanStrategy from './clean-strategy/ButtonCleanStrategy.vue'
 import OperateLogDetailDialog from './dialog/OperateLogDetailDialog.vue'
 import { beforeDay, datetimeFormat } from '@/utils/time'
 import { useStore } from '@/stores'
+import perm from '@/permission/index.ts'
 
 const { auth } = useStore()
 /* 日志筛选与列表 */
@@ -133,12 +134,12 @@ onMounted(() => {
           <MkDateRange class="mr-3" @change="handleDateFilterChange" />
           <MkComplexSearch :fields="searchFields" @change="handleSearchChange" class="mr-3" />
           <!-- 清除策略 导出-->
-          <el-button plain @click="handleExport">
+          <el-button v-if="perm.system.operationLog.export()" plain @click="handleExport">
             <MkIcon name="icon_export_outlined" />
             <span>导出</span>
           </el-button>
           <!-- 清除策略 -->
-          <ButtonCleanStrategy />
+          <ButtonCleanStrategy v-if="perm.system.operationLog.clearPolicy()" />
         </div>
       </component>
 
diff --git a/ui/src/views/system/settings/authentication/EditSCANDrawer.vue b/ui/src/views/system/settings/authentication/EditSCANDrawer.vue
index 8311570d5be..52fc2ab3dee 100644
--- a/ui/src/views/system/settings/authentication/EditSCANDrawer.vue
+++ b/ui/src/views/system/settings/authentication/EditSCANDrawer.vue
@@ -6,6 +6,7 @@ import type { FormInstance, FormRules } from 'element-plus'
 import { LOGIN_METHOD } from '@/api/enums'
 import { LOGIN_METHOD_LABELS, SCAN_FIELD_LABELS } from '@/constants'
 import { MsgSuccess, MsgError } from '@/utils/message'
+import perm from '@/permission'
 
 const emit = defineEmits<{ refresh: [] }>()
 const visible = ref(false)
@@ -82,7 +83,7 @@ defineExpose({ open })
       <!-- 校验 -->
       <el-button plain @click="handleValidatePlatform">校验</el-button>
       <!-- 保存 -->
-      <el-button type="primary" @click="submit">保存</el-button>
+      <el-button v-if="perm.system.loginAuth.edit()" type="primary" @click="submit">保存</el-button>
     </template>
   </MkDrawer>
 </template>
diff --git a/ui/src/views/system/settings/authentication/components/CAS.vue b/ui/src/views/system/settings/authentication/components/CAS.vue
index ff557495bda..49f3a5943cb 100644
--- a/ui/src/views/system/settings/authentication/components/CAS.vue
+++ b/ui/src/views/system/settings/authentication/components/CAS.vue
@@ -5,6 +5,7 @@ import AuthSettingApi from '@/api/admin/system/settings/auth-setting'
 import { LOGIN_METHOD } from '@/api/enums'
 import type { AuthProviderSettingPayload } from '@/api/types'
 import { MsgSuccess } from '@/utils/message'
+import perm from '@/permission'
 
 defineOptions({ name: 'CasAuthenticationSetting' })
 
@@ -72,6 +73,6 @@ onMounted(() => loadSetting)
         <el-switch v-model="form.is_active" class="self-start" />
       </div>
     </el-form-item>
-    <el-button type="primary" @click="submit">保存</el-button>
+    <el-button v-if="perm.system.loginAuth.edit()" type="primary" @click="submit">保存</el-button>
   </el-form>
 </template>
diff --git a/ui/src/views/system/settings/authentication/components/LDAP.vue b/ui/src/views/system/settings/authentication/components/LDAP.vue
index 44a3e05fbb9..993ebdec17c 100644
--- a/ui/src/views/system/settings/authentication/components/LDAP.vue
+++ b/ui/src/views/system/settings/authentication/components/LDAP.vue
@@ -5,6 +5,7 @@ import AuthSettingApi from '@/api/admin/system/settings/auth-setting'
 import { LOGIN_METHOD } from '@/api/enums'
 import type { AuthProviderSettingPayload } from '@/api/types'
 import { MsgSuccess } from '@/utils/message'
+import perm from '@/permission'
 
 defineOptions({ name: 'LdapAuthenticationSetting' })
 const authFormRef = useTemplateRef<FormInstance>('authFormRef')
@@ -75,7 +76,7 @@ onMounted(() => loadSetting())
     </el-form-item>
     <div>
       <!-- 保存 -->
-      <el-button type="primary" @click="submit('save')">保存</el-button>
+      <el-button v-if="perm.system.loginAuth.edit()" type="primary" @click="submit('save')">保存</el-button>
       <!-- 测试连接 -->
       <el-button plain @click="submit('test')">测试连接</el-button>
     </div>
diff --git a/ui/src/views/system/settings/authentication/components/LoginSetting.vue b/ui/src/views/system/settings/authentication/components/LoginSetting.vue
index 27945bd59d3..1a883697ecb 100644
--- a/ui/src/views/system/settings/authentication/components/LoginSetting.vue
+++ b/ui/src/views/system/settings/authentication/components/LoginSetting.vue
@@ -9,6 +9,7 @@ import { LOGIN_METHOD, ROLE_TYPE } from '@/api/enums'
 import { LOGIN_METHOD_LABELS } from '@/constants'
 import { MsgSuccess } from '@/utils/message'
 import { useStore } from '@/stores'
+import perm from '@/permission'
 
 defineOptions({ name: 'AuthenticationSetting' })
 const { auth } = useStore()
@@ -244,6 +245,6 @@ onMounted(() => {
         </el-select>
       </el-form-item>
     </div>
-    <el-button class="mt-4" type="primary" @click="submit">保存</el-button>
+    <el-button v-if="perm.system.loginAuth.edit()" class="mt-4" type="primary" @click="submit">保存</el-button>
   </el-form>
 </template>
diff --git a/ui/src/views/system/settings/authentication/components/OAuth2.vue b/ui/src/views/system/settings/authentication/components/OAuth2.vue
index e88f2a51db7..3c3728836cd 100644
--- a/ui/src/views/system/settings/authentication/components/OAuth2.vue
+++ b/ui/src/views/system/settings/authentication/components/OAuth2.vue
@@ -5,6 +5,7 @@ import AuthSettingApi from '@/api/admin/system/settings/auth-setting'
 import { LOGIN_METHOD } from '@/api/enums'
 import type { AuthProviderSettingPayload } from '@/api/types'
 import { MsgSuccess } from '@/utils/message'
+import perm from '@/permission'
 
 defineOptions({ name: 'OidcAuthenticationSetting' })
 const defaultRedirectUrl = `${window.location.origin}${window.MaxKB?.prefix ?? ''}/api/oauth2`
@@ -77,6 +78,6 @@ onMounted(() => loadSetting())
       ><div class="flex-column"><span>启用 OAuth2 认证</span><el-switch v-model="form.is_active" class="self-start" /></div
     ></el-form-item>
     <!-- 保存 -->
-    <el-button type="primary" @click="submit">保存</el-button>
+    <el-button v-if="perm.system.loginAuth.edit()" type="primary" @click="submit">保存</el-button>
   </el-form>
 </template>
diff --git a/ui/src/views/system/settings/authentication/components/OIDC.vue b/ui/src/views/system/settings/authentication/components/OIDC.vue
index 185faebdd37..4d58860cd07 100644
--- a/ui/src/views/system/settings/authentication/components/OIDC.vue
+++ b/ui/src/views/system/settings/authentication/components/OIDC.vue
@@ -5,6 +5,7 @@ import AuthSettingApi from '@/api/admin/system/settings/auth-setting'
 import { LOGIN_METHOD } from '@/api/enums'
 import type { AuthProviderSettingPayload } from '@/api/types'
 import { MsgSuccess } from '@/utils/message'
+import perm from '@/permission'
 
 defineOptions({ name: 'OidcAuthenticationSetting' })
 const defaultFieldMapping = '{"username":"preferred_username","email":"email"}'
@@ -96,6 +97,6 @@ onMounted(() => loadSetting())
       ><div class="flex-column"><span>启用 OIDC 认证</span><el-switch v-model="form.is_active" class="self-start" /></div
     ></el-form-item>
     <!-- 保存 -->
-    <el-button type="primary" @click="submit">保存</el-button>
+    <el-button v-if="perm.system.loginAuth.edit()" type="primary" @click="submit">保存</el-button>
   </el-form>
 </template>
diff --git a/ui/src/views/system/settings/authentication/components/Saml2.vue b/ui/src/views/system/settings/authentication/components/Saml2.vue
index 5c9b6695dee..f6b07d66f86 100644
--- a/ui/src/views/system/settings/authentication/components/Saml2.vue
+++ b/ui/src/views/system/settings/authentication/components/Saml2.vue
@@ -5,6 +5,7 @@ import AuthSettingApi from '@/api/admin/system/settings/auth-setting'
 import { LOGIN_METHOD } from '@/api/enums'
 import type { AuthProviderSettingPayload } from '@/api/types'
 import { MsgSuccess } from '@/utils/message'
+import perm from '@/permission'
 
 defineOptions({ name: 'SamlAuthenticationSetting' })
 const samlApiBaseUrl = `${window.location.origin}${window.MaxKB?.prefix ?? ''}/api/saml2`
@@ -93,6 +94,6 @@ onMounted(() => loadSetting())
       ><div class="flex-column"><span>启用 SAML2 认证</span><el-switch v-model="form.is_active" class="self-start" /></div
     ></el-form-item>
     <!-- 保存 -->
-    <el-button type="primary" @click="submit">保存</el-button>
+    <el-button v-if="perm.system.loginAuth.edit()" type="primary" @click="submit">保存</el-button>
   </el-form>
 </template>
diff --git a/ui/src/views/system/settings/email/EmailSettingsView.vue b/ui/src/views/system/settings/email/EmailSettingsView.vue
index 0ce57f5c80f..95ca1fb5cc4 100644
--- a/ui/src/views/system/settings/email/EmailSettingsView.vue
+++ b/ui/src/views/system/settings/email/EmailSettingsView.vue
@@ -4,6 +4,7 @@ import type { FormInstance, FormRules } from 'element-plus'
 import type { EmailSettingPayload } from '@/api/types'
 import EmailSettingApi from '@/api/admin/system/settings/email-setting'
 import { MsgSuccess } from '@/utils/message'
+import perm from '@/permission'
 
 const defaultEmailSetting: EmailSettingPayload = {
   email_host: '',
@@ -93,7 +94,7 @@ onMounted(() => loadEmailSetting())
       </el-form-item>
 
       <!-- 保存 -->
-      <el-button type="primary" @click="submitEmailSetting('save')">保存</el-button>
+      <el-button v-if="perm.system.email.edit()" type="primary" @click="submitEmailSetting('save')">保存</el-button>
       <!-- 测试连接 -->
       <el-button plain @click="submitEmailSetting('test')">测试连接</el-button>
     </el-form>
diff --git a/ui/src/views/system/settings/theme/ThemeSettingView.vue b/ui/src/views/system/settings/theme/ThemeSettingView.vue
index 334029751fd..9f7d18604ae 100644
--- a/ui/src/views/system/settings/theme/ThemeSettingView.vue
+++ b/ui/src/views/system/settings/theme/ThemeSettingView.vue
@@ -8,6 +8,7 @@ import { useStore } from '@/stores'
 import { MsgError, MsgSuccess } from '@/utils/message'
 import LoginPreview from './components/LoginPreview.vue'
 import PlatformPreview from './components/PlatformPreview.vue'
+import perm from '@/permission/index.ts'
 
 type ThemeImageField = 'icon' | 'loginImage' | 'loginLogo'
 type ThemeImageValue = File | string
@@ -281,7 +282,7 @@ onBeforeUnmount(() => theme.setTheme(toThemeInfo(savedThemeSetting.value)))
 
       <component :is="Footer">
         <el-button plain @click="handleAbandonChanges">放弃更新</el-button>
-        <el-button type="primary" @click="handleSaveTheme">保存并应用</el-button>
+        <el-button v-if="perm.system.appearance.edit()" type="primary" @click="handleSaveTheme">保存并应用</el-button>
       </component>
     </template>
   </MkViewLayout>