diff --git a/streampark-console/streampark-console-service/src/main/java/org/apache/streampark/console/core/controller/SettingController.java b/streampark-console/streampark-console-service/src/main/java/org/apache/streampark/console/core/controller/SettingController.java
index 4b3c751f47..e16f5ae3c9 100644
--- a/streampark-console/streampark-console-service/src/main/java/org/apache/streampark/console/core/controller/SettingController.java
+++ b/streampark-console/streampark-console-service/src/main/java/org/apache/streampark/console/core/controller/SettingController.java
@@ -56,6 +56,7 @@ public RestResponse all() {
     }
 
     @PostMapping("get")
+    @RequiresPermissions("setting:view")
     public RestResponse get(String key) {
         Setting setting = settingService.get(key);
         return RestResponse.success(setting);
@@ -111,6 +112,7 @@ public RestResponse updateEmail(SenderEmail senderEmail) {
     }
 
     @PostMapping("check/hadoop")
+    @RequiresPermissions("setting:view")
     public RestResponse checkHadoop() throws IOException {
         HadoopUtils.hdfs().getStatus();
         return RestResponse.success(true);