diff --git a/pkg/models/tenant/tenant.go b/pkg/models/tenant/tenant.go
index 34c44ae0b..75784460d 100644
--- a/pkg/models/tenant/tenant.go
+++ b/pkg/models/tenant/tenant.go
@@ -437,6 +437,12 @@ func (t *tenantOperator) CreateWorkspaceTemplate(user user.Info, workspace *tena
 		}
 
 	}
+
+	if workspace.Spec.Template.Spec.Manager != user.GetName() {
+		if err := t.checkWorkspaceTemplatePermission(user, workspace.Name); err != nil {
+			return nil, err
+		}
+	}
 	return workspace, t.client.Create(context.Background(), workspace)
 }