diff --git a/routes/web.php b/routes/web.php
index 1c04c550..dfb888cc 100644
--- a/routes/web.php
+++ b/routes/web.php
@@ -170,8 +170,10 @@ Route::prefix('admin')
             Route::post('manage', 'PluginController@manage');
             Route::any('config/{name}', 'PluginController@config');
             Route::get('readme/{name}', 'PluginController@readme');
-            Route::post('upload', 'PluginController@upload');
-            Route::post('wget', 'PluginController@wget');
+            Route::middleware('role:super-admin')->group(function () {
+                Route::post('upload', 'PluginController@upload');
+                Route::post('wget', 'PluginController@wget');
+            });
 
             Route::prefix('market')->group(function () {
                 Route::view('', 'admin.market');