diff --git a/ui/src/permission/application/system-manage.ts b/ui/src/permission/application/system-manage.ts
index 33bdfca62..61b866e27 100644
--- a/ui/src/permission/application/system-manage.ts
+++ b/ui/src/permission/application/system-manage.ts
@@ -38,7 +38,14 @@ const systemManage = {
             'OR'
     ),
     folderDelete: () => false,
-    auth: () => false,
+    auth: () => 
+        hasPermission(
+            [
+              RoleConst.ADMIN,
+              PermissionConst.RESOURCE_APPLICATION_AUTH
+            ],
+            'OR'
+    ),
     overview_embed: () =>
         hasPermission(
             [
diff --git a/ui/src/permission/knowledge/system-manage.ts b/ui/src/permission/knowledge/system-manage.ts
index f631ce9db..92b931616 100644
--- a/ui/src/permission/knowledge/system-manage.ts
+++ b/ui/src/permission/knowledge/system-manage.ts
@@ -153,7 +153,12 @@ const systemManage = {
     chat_user_edit: () =>false,
 
   
-  auth: () => false,
+  auth: () => 
+    hasPermission([
+      RoleConst.ADMIN,
+      PermissionConst.RESOURCE_KNOWLEDGE_AUTH
+    ],'OR'
+    ),
   folderCreate: () => false,
   folderEdit: () => false,
   folderDelete: () => false,
diff --git a/ui/src/permission/model/system-manage.ts b/ui/src/permission/model/system-manage.ts
index 104323306..9af51a15d 100644
--- a/ui/src/permission/model/system-manage.ts
+++ b/ui/src/permission/model/system-manage.ts
@@ -20,7 +20,8 @@ const systemManage = {
   delete: () =>
     hasPermission([RoleConst.ADMIN, PermissionConst.RESOURCE_MODEL_DELETE], 'OR'),
 
-  auth: () => false,  
+  auth: () => 
+    hasPermission([RoleConst.ADMIN, PermissionConst.RESOURCE_MODEL_AUTH], 'OR'),  
   folderCreate: () => false,
   folderEdit: () => false,
   folderDelete: () => false,
diff --git a/ui/src/permission/tool/system-manage.ts b/ui/src/permission/tool/system-manage.ts
index bbac81d66..f7f0a1cd4 100644
--- a/ui/src/permission/tool/system-manage.ts
+++ b/ui/src/permission/tool/system-manage.ts
@@ -57,7 +57,14 @@ const systemManage = {
       'OR',
     ),
 
-  auth: () => false,
+  auth: () => 
+    hasPermission(
+      [
+        RoleConst.ADMIN,
+        PermissionConst.RESOURCE_TOOL_AUTH,
+      ],
+      'OR',
+    ),
   folderCreate: () => false,
   folderEdit: () => false,
   folderDelete: () => false,
diff --git a/ui/src/utils/permission/data.ts b/ui/src/utils/permission/data.ts
index a76da7652..9aac7c422 100644
--- a/ui/src/utils/permission/data.ts
+++ b/ui/src/utils/permission/data.ts
@@ -281,7 +281,7 @@ const PermissionConst = {
   
   RESOURCE_MODEL_AUTH: new Permission('SYSTEM_RESOURCE_MODEL:READ+AUTH'),
   RESOURCE_APPLICATION_AUTH: new Permission('SYSTEM_RESOURCE_APPLICATION:READ+AUTH'),
-  RESOURCE_KNOWLEDGE_AUTH: new Permission('SYSTEM_RESOURCE_AUTH:READ+AUTH'),
+  RESOURCE_KNOWLEDGE_AUTH: new Permission('SYSTEM_RESOURCE_KNOWLEDGE:READ+AUTH'),
   RESOURCE_TOOL_AUTH: new Permission('SYSTEM_RESOURCE_TOOL:READ+AUTH'),
  
   APPEARANCE_SETTINGS_READ: new Permission('APPEARANCE_SETTINGS:READ'),
diff --git a/ui/src/views/knowledge/component/KnowledgeListContainer.vue b/ui/src/views/knowledge/component/KnowledgeListContainer.vue
index 0c414aaaa..a12a07df3 100644
--- a/ui/src/views/knowledge/component/KnowledgeListContainer.vue
+++ b/ui/src/views/knowledge/component/KnowledgeListContainer.vue
@@ -401,6 +401,7 @@ const MoreFilledPermission = (item: any) => {
     permissionPrecise.value.generate(item.id) ||
     (permissionPrecise.value.edit(item.id) && apiType.value) === 'workspace' ||
     permissionPrecise.value.export(item.id) ||
+    permissionPrecise.value.auth(item.id) ||
     permissionPrecise.value.delete(item.id) ||
     isSystemShare.value
   )
diff --git a/ui/src/views/model/component/ModelCard.vue b/ui/src/views/model/component/ModelCard.vue
index a9273bf84..2bc6109dd 100644
--- a/ui/src/views/model/component/ModelCard.vue
+++ b/ui/src/views/model/component/ModelCard.vue
@@ -167,7 +167,10 @@ const permissionPrecise = computed(() => {
 
 const MoreFilledPermission = (id: any) => {
   return (
-    permissionPrecise.value.modify(id) || permissionPrecise.value.delete(id) || isSystemShare.value
+    permissionPrecise.value.modify(id) ||
+    permissionPrecise.value.delete(id) ||
+    permissionPrecise.value.auth(id) ||
+    isSystemShare.value
   )
 }
 
diff --git a/ui/src/views/system-resource-management/ModelResourceIndex.vue b/ui/src/views/system-resource-management/ModelResourceIndex.vue
index 89907166b..10d04838e 100644
--- a/ui/src/views/system-resource-management/ModelResourceIndex.vue
+++ b/ui/src/views/system-resource-management/ModelResourceIndex.vue
@@ -298,7 +298,7 @@ const paginationConfig = reactive({
 
 // sync generete edit export delete
 const MoreFilledPermission = () => {
-  return permissionPrecise.value.delete() || permissionPrecise.value.auth()
+  return permissionPrecise.value.delete() || permissionPrecise.value.modify()
 }
 
 const ResourceAuthorizationDrawerRef = ref()
diff --git a/ui/src/views/system-resource-management/ToolResourceIndex.vue b/ui/src/views/system-resource-management/ToolResourceIndex.vue
index 531657c9f..b202c707c 100644
--- a/ui/src/views/system-resource-management/ToolResourceIndex.vue
+++ b/ui/src/views/system-resource-management/ToolResourceIndex.vue
@@ -289,7 +289,7 @@
                     <AppIcon iconName="app-export" class="color-secondary"></AppIcon>
                     {{ $t('common.export') }}
                   </el-dropdown-item>
-                  <el-dropdown-item v-if="row.tool_type === 'MCP'" @click.stop="showMcpConfig(row)">
+                  <el-dropdown-item v-if="row.tool_type === 'MCP' && permissionPrecise.edit()" @click.stop="showMcpConfig(row)">
                     <AppIcon iconName="app-operate-log" class="color-secondary"></AppIcon>
                     {{ $t('views.tool.mcpConfig') }}
                   </el-dropdown-item>
diff --git a/ui/src/views/tool/component/ToolListContainer.vue b/ui/src/views/tool/component/ToolListContainer.vue
index af4294a93..88e3ccacd 100644
--- a/ui/src/views/tool/component/ToolListContainer.vue
+++ b/ui/src/views/tool/component/ToolListContainer.vue
@@ -386,6 +386,7 @@ const MoreFieldPermission = (id: any) => {
     permissionPrecise.value.edit(id) ||
     permissionPrecise.value.export(id) ||
     permissionPrecise.value.delete(id) ||
+    permissionPrecise.value.auth(id) ||
     isSystemShare.value
   )
 }