diff --git a/src/main/java/net/geedge/asw/common/util/Constants.java b/src/main/java/net/geedge/asw/common/util/Constants.java
index 2fe4f98..d2bb0de 100644
--- a/src/main/java/net/geedge/asw/common/util/Constants.java
+++ b/src/main/java/net/geedge/asw/common/util/Constants.java
@@ -110,4 +110,28 @@ public class Constants {
 	public static final List<String> ANDROID_PACKAGE_TYPE_LIST = T.ListUtil.of("xapk", "apk");
 
 	public static final String EMPTY_FILE_MD5 = "d41d8cd98f00b204e9800998ecf8427e";
+
+
+	/**
+	 * 系统内置角色
+	 */
+	public static enum BuiltInRoleEnum {
+		OWNER("owner"),
+
+		MAINTAINER("maintainer"),
+
+		DEVELOPER("developer"),
+
+		GUEST("guest");
+
+		private String id;
+
+		BuiltInRoleEnum(String id) {
+			this.id = id;
+		}
+
+		public String getId() {
+			return id;
+		}
+	}
 }
diff --git a/src/main/java/net/geedge/asw/module/sys/service/impl/SysRoleServiceImpl.java b/src/main/java/net/geedge/asw/module/sys/service/impl/SysRoleServiceImpl.java
index a87b274..38dc819 100644
--- a/src/main/java/net/geedge/asw/module/sys/service/impl/SysRoleServiceImpl.java
+++ b/src/main/java/net/geedge/asw/module/sys/service/impl/SysRoleServiceImpl.java
@@ -81,7 +81,7 @@ public class SysRoleServiceImpl extends ServiceImpl<SysRoleDao, SysRoleEntity> i
 
 	@Override
 	public Page queryList(Map params) {
-		params.put("orderBy", T.StrUtil.emptyToDefault(T.MapUtil.getStr(params, "orderBy"), "name"));
+		params.put("orderBy", T.StrUtil.emptyToDefault(T.MapUtil.getStr(params, "orderBy"), "create_timestamp"));
 		Page page = new Query(SysRoleEntity.class).getPage(params);
 		List<SysRoleEntity> roleList = this.getBaseMapper().queryList(page, params);
 		page.setRecords(roleList);
diff --git a/src/main/java/net/geedge/asw/module/workspace/service/impl/WorkspaceServiceImpl.java b/src/main/java/net/geedge/asw/module/workspace/service/impl/WorkspaceServiceImpl.java
index 1f6b139..46239aa 100644
--- a/src/main/java/net/geedge/asw/module/workspace/service/impl/WorkspaceServiceImpl.java
+++ b/src/main/java/net/geedge/asw/module/workspace/service/impl/WorkspaceServiceImpl.java
@@ -6,6 +6,7 @@ import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
 import com.baomidou.mybatisplus.extension.plugins.pagination.Page;
 import com.baomidou.mybatisplus.extension.service.impl.ServiceImpl;
 import net.geedge.asw.common.util.ASWException;
+import net.geedge.asw.common.util.Constants;
 import net.geedge.asw.common.util.RCode;
 import net.geedge.asw.common.util.T;
 import net.geedge.asw.module.workspace.dao.WorkspaceDao;
@@ -60,6 +61,15 @@ public class WorkspaceServiceImpl extends ServiceImpl<WorkspaceDao, WorkspaceEnt
                 x.setCreateUserId(StpUtil.getLoginIdAsString());
             });
             workspaceMemberService.saveBatch(members);
+        } else {
+            // workspace 默认分配 Owner 角色
+            WorkspaceMemberEntity member = new WorkspaceMemberEntity();
+            member.setWorkspaceId(workspace.getId());
+            member.setUserId(StpUtil.getLoginIdAsString());
+            member.setRoleId(Constants.BuiltInRoleEnum.OWNER.getId());
+            member.setCreateTimestamp(System.currentTimeMillis());
+            member.setCreateUserId(StpUtil.getLoginIdAsString());
+            workspaceMemberService.save(member);
         }
 
         try {
diff --git a/src/main/resources/db/migration/R__AZ_sys_menu.sql b/src/main/resources/db/migration/R__AZ_sys_menu.sql
index 93b5013..c05829f 100644
--- a/src/main/resources/db/migration/R__AZ_sys_menu.sql
+++ b/src/main/resources/db/migration/R__AZ_sys_menu.sql
@@ -15,6 +15,10 @@ INSERT INTO `sys_menu` (`id`, `name`, `i18n`, `pid`, `type`, `perms`, `route`, `
 INSERT INTO `sys_menu` (`id`, `name`, `i18n`, `pid`, `type`, `perms`, `route`, `icon`, `order`, `create_timestamp`, `state`) VALUES ('2005', 'application_history', 'buttons.history', '2000', 'button', '', '', '', 5, 1722478572000, 1);
 INSERT INTO `sys_menu` (`id`, `name`, `i18n`, `pid`, `type`, `perms`, `route`, `icon`, `order`, `create_timestamp`, `state`) VALUES ('2006', 'application_compare', 'buttons.compare', '2000', 'button', '', '', '', 6, 1722478572000, 1);
 INSERT INTO `sys_menu` (`id`, `name`, `i18n`, `pid`, `type`, `perms`, `route`, `icon`, `order`, `create_timestamp`, `state`) VALUES ('2007', 'application_restore', 'buttons.restore', '2000', 'button', '', '', '', 7, 1722478572000, 1);
+INSERT INTO `sys_menu` (`id`, `name`, `i18n`, `pid`, `type`, `perms`, `route`, `icon`, `order`, `create_timestamp`, `state`) VALUES ('2008', 'branch_view', 'buttons.view', '2000', 'button', '', '', '', 8, 1722478572000, 1);
+INSERT INTO `sys_menu` (`id`, `name`, `i18n`, `pid`, `type`, `perms`, `route`, `icon`, `order`, `create_timestamp`, `state`) VALUES ('2009', 'main_branch_edit', 'buttons.edit', '2000', 'button', '', '', '', 9, 1722478572000, 1);
+INSERT INTO `sys_menu` (`id`, `name`, `i18n`, `pid`, `type`, `perms`, `route`, `icon`, `order`, `create_timestamp`, `state`) VALUES ('2010', 'regular_branch_edit', 'buttons.edit', '2000', 'button', '', '', '', 10, 1722478572000, 1);
+INSERT INTO `sys_menu` (`id`, `name`, `i18n`, `pid`, `type`, `perms`, `route`, `icon`, `order`, `create_timestamp`, `state`) VALUES ('2011', 'branch_delete', 'buttons.delete', '2000', 'button', '', '', '', 11, 1722478572000, 1);
 
 INSERT INTO `sys_menu` (`id`, `name`, `i18n`, `pid`, `type`, `perms`, `route`, `icon`, `order`, `create_timestamp`, `state`) VALUES ('3000', 'pcaps', 'overall.pcaps', '0', 'menu', '', '/pcaps', 'asw-icon icon-Pcaps', 2, 1722478572000, 1);
 INSERT INTO `sys_menu` (`id`, `name`, `i18n`, `pid`, `type`, `perms`, `route`, `icon`, `order`, `create_timestamp`, `state`) VALUES ('3001', 'pacp_view', 'buttons.view', '3000', 'button', '', '', '', 1, 1722478572000, 1);
@@ -33,6 +37,8 @@ INSERT INTO `sys_menu` (`id`, `name`, `i18n`, `pid`, `type`, `perms`, `route`, `
 INSERT INTO `sys_menu` (`id`, `name`, `i18n`, `pid`, `type`, `perms`, `route`, `icon`, `order`, `create_timestamp`, `state`) VALUES ('5001', 'job_view', 'buttons.view', '5000', 'button', '', '', '', 1, 1722478572000, 1);
 INSERT INTO `sys_menu` (`id`, `name`, `i18n`, `pid`, `type`, `perms`, `route`, `icon`, `order`, `create_timestamp`, `state`) VALUES ('5002', 'job_add', 'buttons.add', '5000', 'button', '', '', '', 2, 1722478572000, 1);
 INSERT INTO `sys_menu` (`id`, `name`, `i18n`, `pid`, `type`, `perms`, `route`, `icon`, `order`, `create_timestamp`, `state`) VALUES ('5003', 'job_delete', 'buttons.delete', '5000', 'button', '', '', '', 3, 1722478572000, 1);
+INSERT INTO `sys_menu` (`id`, `name`, `i18n`, `pid`, `type`, `perms`, `route`, `icon`, `order`, `create_timestamp`, `state`) VALUES ('5004', 'job_cancel', 'buttons.cancel', '5000', 'button', '', '', '', 4, 1722478572000, 1);
+INSERT INTO `sys_menu` (`id`, `name`, `i18n`, `pid`, `type`, `perms`, `route`, `icon`, `order`, `create_timestamp`, `state`) VALUES ('5005', 'job_retry', 'buttons.retry', '5000', 'button', '', '', '', 5, 1722478572000, 1);
 
 INSERT INTO `sys_menu` (`id`, `name`, `i18n`, `pid`, `type`, `perms`, `route`, `icon`, `order`, `create_timestamp`, `state`) VALUES ('6000', 'playbooks', 'overall.playbooks', '0', 'menu', '', '/playbooks', 'asw-icon icon-Playbooks', 5, 1722478572000, 0);
 INSERT INTO `sys_menu` (`id`, `name`, `i18n`, `pid`, `type`, `perms`, `route`, `icon`, `order`, `create_timestamp`, `state`) VALUES ('6001', 'playbook_view', 'buttons.view', '6000', 'button', '', '', '', 1, 1722478572000, 1);
diff --git a/src/main/resources/db/migration/R__AZ_sys_role_menu.sql b/src/main/resources/db/migration/R__AZ_sys_role_menu.sql
index d7a2a91..9713cb8 100644
--- a/src/main/resources/db/migration/R__AZ_sys_role_menu.sql
+++ b/src/main/resources/db/migration/R__AZ_sys_role_menu.sql
@@ -1,68 +1,174 @@
 /**
  *  先清空 sys_role_menu 表中 admin&common 相关数据，再导入
  */
-delete from sys_role_menu where role_id in ('admin' ,'readonly');
+delete from sys_role_menu where role_id in ('owner' ,'maintainer', 'developer', 'guest');
 
--- admin
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '1000');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '1001');
+-- owner
+-- 具有所有权限
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '1');
 
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '2000');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '2001');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '2002');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '2003');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '2004');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '2005');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '2006');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '2007');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '1000');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '1001');
 
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '3000');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '3001');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '3002');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '3003');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '3004');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '3005');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '2000');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '2001');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '2002');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '2003');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '2004');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '2005');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '2006');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '2007');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '2008');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '2009');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '2010');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '2011');
 
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '4000');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '4001');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '4002');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '4003');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '4004');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '3000');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '3001');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '3002');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '3003');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '3004');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '3005');
 
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '5000');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '5001');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '5002');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '5003');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '4000');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '4001');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '4002');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '4003');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '4004');
 
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '6000');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '6001');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '5000');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '5001');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '5002');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '5003');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '5004');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '5005');
 
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '7000');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '7001');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '6000');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '6001');
 
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '8000');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '8001');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '8002');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '8003');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '8004');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '7000');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '7001');
 
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '9000');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '9001');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '9002');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '9003');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '9004');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '8000');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '8001');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '8002');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '8003');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '8004');
+
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '9000');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '9001');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '9002');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '9003');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('owner', '9004');
 
 
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('admin', '1');
+-- maintainer
+-- 具有其他页面所有权限，不包括 member 管理权限
+-- 分支所有权
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '1');
+
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '1000');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '1001');
+
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '2000');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '2001');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '2002');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '2003');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '2004');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '2005');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '2006');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '2007');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '2008');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '2009');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '2010');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '2011');
+
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '3000');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '3001');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '3002');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '3003');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '3004');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '3005');
+
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '4000');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '4001');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '4002');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '4003');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '4004');
+
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '5000');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '5001');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '5002');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '5003');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '5004');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '5005');
+
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '6000');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '6001');
+
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '7000');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '7001');
+
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '8000');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '8001');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '8002');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '8003');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('maintainer', '8004');
 
 
--- common
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('readonly', '1001');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('readonly', '2001');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('readonly', '3001');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('readonly', '4001');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('readonly', '5001');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('readonly', '6001');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('readonly', '7001');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('readonly', '8002');
-INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('readonly', '9001');
\ No newline at end of file
+-- developer
+-- 具有其他页面所有权限，不包括 member 管理权限
+-- 分支查看权
+-- regular branch 编辑权
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '1');
+
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '1000');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '1001');
+
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '2000');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '2001');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '2002');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '2003');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '2004');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '2005');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '2006');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '2007');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '2008');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '2010');
+
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '3000');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '3001');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '3002');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '3003');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '3004');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '3005');
+
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '4000');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '4001');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '4002');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '4003');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '4004');
+
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '5000');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '5001');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '5002');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '5003');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '5004');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '5005');
+
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '6000');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '6001');
+
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '7000');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '7001');
+
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '8000');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '8001');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '8002');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '8003');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('developer', '8004');
+
+-- guest
+-- 只有 application 列表查看权限
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('guest', '2000');
+INSERT INTO `sys_role_menu`(`role_id`, `menu_id`) VALUES ('guest', '2001');
diff --git a/src/main/resources/db/migration/V1.0.01__INIT_TABLES.sql b/src/main/resources/db/migration/V1.0.01__INIT_TABLES.sql
index a926916..514da4c 100644
--- a/src/main/resources/db/migration/V1.0.01__INIT_TABLES.sql
+++ b/src/main/resources/db/migration/V1.0.01__INIT_TABLES.sql
@@ -46,8 +46,10 @@ CREATE TABLE `sys_role` (
 ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
 
 -- 添加内置角色
-INSERT INTO `sys_role` (`id`, `name`, `i18n`, `remark`, `build_in`, `create_timestamp`, `update_timestamp`, `create_user_id`, `update_user_id`) VALUES ('admin', 'admin', 'admin', 'The system built-in administrator role', 1, UNIX_TIMESTAMP(NOW())*1000, UNIX_TIMESTAMP(NOW())*1000, 'admin', 'admin');
-INSERT INTO `sys_role` (`id`, `name`, `i18n`, `remark`, `build_in`, `create_timestamp`, `update_timestamp`, `create_user_id`, `update_user_id`) VALUES ('readonly', 'readonly', 'readonly', 'The system built-in common user role', 1, UNIX_TIMESTAMP(NOW())*1000, UNIX_TIMESTAMP(NOW())*1000, 'admin', 'admin');
+INSERT INTO `sys_role`(`id`, `name`, `i18n`, `remark`, `build_in`, `create_timestamp`, `update_timestamp`, `create_user_id`, `update_user_id`) VALUES ('owner', 'Owner', 'owner', 'The system built-in owner user role', 1, 1729580481001, 1729580481000, 'admin', 'admin');
+INSERT INTO `sys_role`(`id`, `name`, `i18n`, `remark`, `build_in`, `create_timestamp`, `update_timestamp`, `create_user_id`, `update_user_id`) VALUES ('maintainer', 'Maintainer', 'maintainer', 'The system built-in maintainer user role', 1, 1729580481002, 1729580481000, 'admin', 'admin');
+INSERT INTO `sys_role`(`id`, `name`, `i18n`, `remark`, `build_in`, `create_timestamp`, `update_timestamp`, `create_user_id`, `update_user_id`) VALUES ('developer', 'Developer', 'developer', 'The system built-in developer user role', 1, 1729580481003, 1729580481000, 'admin', 'admin');
+INSERT INTO `sys_role`(`id`, `name`, `i18n`, `remark`, `build_in`, `create_timestamp`, `update_timestamp`, `create_user_id`, `update_user_id`) VALUES ('guest', 'Guest', 'guest', 'The system built-in guest user role', 1, 1729580481004, 1729580481000, 'admin', 'admin');
 
 
 DROP TABLE IF EXISTS `sys_menu`;
@@ -471,7 +473,7 @@ CREATE TABLE `workspace_member` (
     KEY `idx_role_id` (`role_id`) USING BTREE
 ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
 
-INSERT INTO `workspace_member` (`workspace_id`, `user_id`, `role_id`, `create_timestamp`, `create_user_id`) VALUES ('1', 'admin', 'admin', 1724291229000, 'admin');
+INSERT INTO `workspace_member` (`workspace_id`, `user_id`, `role_id`, `create_timestamp`, `create_user_id`) VALUES ('1', 'admin', 'owner', 1724291229000, 'admin');
 
 
 /**