diff --git a/backend/apps/system/api/variable_api.py b/backend/apps/system/api/variable_api.py
index 99c30e69..ca5c952f 100644
--- a/backend/apps/system/api/variable_api.py
+++ b/backend/apps/system/api/variable_api.py
@@ -33,7 +33,7 @@ async def list_all_data(session: SessionDep, trans: Trans, variable: SystemVaria
 
 
 @router.post("/listPage/{pageNum}/{pageSize}",response_model=None, summary=f"{PLACEHOLDER_PREFIX}variable_page")
-@require_permissions(permission=SqlbotPermission(role=['ws_admin']))
+@require_permissions(permission=SqlbotPermission(role=['admin']))
 async def pager(session: SessionDep, trans: Trans, pageNum: int, pageSize: int,
                         variable: SystemVariable = None):
     return await list_page(session, trans, pageNum, pageSize, variable)
diff --git a/backend/apps/system/crud/system_variable.py b/backend/apps/system/crud/system_variable.py
index 0ead75d2..bfc5faf0 100644
--- a/backend/apps/system/crud/system_variable.py
+++ b/backend/apps/system/crud/system_variable.py
@@ -49,6 +49,7 @@ def list_all(session: SessionDep, trans: Trans, variable: SystemVariable):
         data = SystemVariable(**r.__dict__)
         if data.type == 'system':
             data.name = trans(data.name)
+        del data.value
         res.append(data)
     return res