diff --git a/go.mod b/go.mod
index 80fa7b41..f5c8d863 100644
--- a/go.mod
+++ b/go.mod
@@ -5,7 +5,7 @@ go 1.23.4
 toolchain go1.23.6
 
 require (
-	github.com/eolinker/ap-account v1.0.15
+	github.com/eolinker/ap-account v1.0.16
 	github.com/eolinker/eosc v0.18.3
 	github.com/eolinker/go-common v1.1.7
 	github.com/gabriel-vasile/mimetype v1.4.4
@@ -86,7 +86,7 @@ require (
 //	github.com/eolinker/eosc => ../../eolinker/eosc
 //)
 
-replace github.com/eolinker/ap-account => ../../eolinker/ap-account
+//replace github.com/eolinker/ap-account => ../../eolinker/ap-account
 
 //
 //replace github.com/eolinker/go-common => ../../eolinker/go-common
diff --git a/go.sum b/go.sum
index 431be974..2ff0d7ee 100644
--- a/go.sum
+++ b/go.sum
@@ -28,8 +28,8 @@ github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f h1:lO4WD4F/r
 github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f/go.mod h1:cuUVRXasLTGF7a8hSLbxyZXjz+1KgoB3wDUb6vlszIc=
 github.com/dustin/go-humanize v1.0.0 h1:VSnTsYCnlFHaM2/igO1h6X3HA71jcobQuxemgkq4zYo=
 github.com/dustin/go-humanize v1.0.0/go.mod h1:HtrtbFcZ19U5GC7JDqmcUSB87Iq5E25KnS6fMYU6eOk=
-github.com/eolinker/ap-account v1.0.15 h1:n6DJeL6RHZ8eLlZUcY2U3H4d/GPaA5oelAx3R0E6yL8=
-github.com/eolinker/ap-account v1.0.15/go.mod h1:zm/Ivs6waJ/M/nEszhpPmM6g50y/MKO+5eABFAdeD0g=
+github.com/eolinker/ap-account v1.0.16 h1:v1VvSeQ2AvxAvkYT4n4APqZdWS8d1CbA/1O0LYEyNM4=
+github.com/eolinker/ap-account v1.0.16/go.mod h1:zm/Ivs6waJ/M/nEszhpPmM6g50y/MKO+5eABFAdeD0g=
 github.com/eolinker/eosc v0.18.3 h1:3IK5HkAPnJRfLbQ0FR7kWsZr6Y/OiqqGazvN1q2BL5A=
 github.com/eolinker/eosc v0.18.3/go.mod h1:O9PQQXFCpB6fjHf+oFt/LN6EOAv779ItbMixMKCfTfk=
 github.com/eolinker/go-common v1.1.7 h1:bi7wDmlCYQGjS3k8Bz/o+Mo9aMJAzmPsBLXWurxPfwk=
diff --git a/resources/access/access.yaml b/resources/access/access.yaml
index bafec116..4beef30e 100644
--- a/resources/access/access.yaml
+++ b/resources/access/access.yaml
@@ -131,6 +131,16 @@ system:
             value: 'manager'
             dependents:
               - system.settings.ai_api.view
+      - name: login
+        value: 'login'
+        children:
+          - name: view
+            value: 'view'
+            guest_allow: true
+          - name: manager
+            value: 'manager'
+            dependents:
+              - system.settings.login.view
       - name: ai log
         value: 'ai_log'
         children:
diff --git a/resources/access/role.yaml b/resources/access/role.yaml
index 6637cbae..30714d52 100644
--- a/resources/access/role.yaml
+++ b/resources/access/role.yaml
@@ -26,6 +26,8 @@ system:
       - system.settings.general.view
       - system.settings.log_configuration.manager
       - system.settings.log_configuration.view
+      - system.settings.login.manager
+      - system.settings.login.view
       - system.settings.mcp.view
       - system.settings.mcp.manager
       - system.settings.role.view
@@ -69,6 +71,8 @@ system:
       - system.settings.general.view
       - system.settings.log_configuration.manager
       - system.settings.log_configuration.view
+      - system.settings.login.manager
+      - system.settings.login.view
       - system.settings.ssl_certificate.manager
       - system.settings.ssl_certificate.view
       - system.settings.strategy.view