diff --git a/api/controllers/console/app/workflow.py b/api/controllers/console/app/workflow.py
index 2bbf22ed83..f3c024a6b8 100644
--- a/api/controllers/console/app/workflow.py
+++ b/api/controllers/console/app/workflow.py
@@ -957,6 +957,7 @@ class WorkflowFeaturesApi(Resource):
     @login_required
     @account_initialization_required
     @get_app_model(mode=[AppMode.ADVANCED_CHAT, AppMode.WORKFLOW])
+    @edit_permission_required
     def post(self, app_model: App):
         current_user, _ = current_account_with_tenant()