diff --git a/api/controllers/console/datasets/rag_pipeline/rag_pipeline_workflow.py b/api/controllers/console/datasets/rag_pipeline/rag_pipeline_workflow.py
index 964de0a863..c70343ec95 100644
--- a/api/controllers/console/datasets/rag_pipeline/rag_pipeline_workflow.py
+++ b/api/controllers/console/datasets/rag_pipeline/rag_pipeline_workflow.py
@@ -950,6 +950,12 @@ class RagPipelineTransformApi(Resource):
     @login_required
     @account_initialization_required
     def post(self, dataset_id):
+        if not isinstance(current_user, Account):
+            raise Forbidden()
+
+        if not (current_user.is_editor or current_user.is_dataset_operator):
+            raise Forbidden()
+
         dataset_id = str(dataset_id)
         rag_pipeline_transform_service = RagPipelineTransformService()
         result = rag_pipeline_transform_service.transform_dataset(dataset_id)
diff --git a/api/installed_plugins.jsonl b/api/installed_plugins.jsonl
deleted file mode 100644
index 463e24ae64..0000000000
--- a/api/installed_plugins.jsonl
+++ /dev/null
@@ -1 +0,0 @@
-{"not_installed": [], "plugin_install_failed": []}
\ No newline at end of file