diff --git a/sql/models.py b/sql/models.py
index 84c0377369..4cc7b316db 100755
--- a/sql/models.py
+++ b/sql/models.py
@@ -245,7 +245,7 @@ class SqlWorkflow(models.Model):
     """
 
     workflow_name = models.CharField("工单内容", max_length=50)
-    demand_url = models.CharField("需求链接", max_length=500)
+    demand_url = models.CharField("需求链接", max_length=500, blank=True)
     group_id = models.IntegerField("组ID")
     group_name = models.CharField("组名称", max_length=100)
     instance = models.ForeignKey(Instance, on_delete=models.CASCADE)
diff --git a/sql/sql_workflow.py b/sql/sql_workflow.py
index 322c4d67c1..6f8707ad0d 100644
--- a/sql/sql_workflow.py
+++ b/sql/sql_workflow.py
@@ -131,160 +131,6 @@ def _sql_workflow_list(request):
     )
 
 
-@permission_required("sql.sql_submit", raise_exception=True)
-def check(request):
-    """SQL检测按钮, 此处没有产生工单"""
-    sql_content = request.POST.get("sql_content")
-    instance_name = request.POST.get("instance_name")
-    instance = Instance.objects.get(instance_name=instance_name)
-    db_name = request.POST.get("db_name")
-
-    result = {"status": 0, "msg": "ok", "data": {}}
-    # 服务器端参数验证
-    if sql_content is None or instance_name is None or db_name is None:
-        result["status"] = 1
-        result["msg"] = "页面提交参数可能为空"
-        return HttpResponse(json.dumps(result), content_type="application/json")
-
-    # 交给engine进行检测
-    try:
-        check_engine = get_engine(instance=instance)
-        check_result = check_engine.execute_check(
-            db_name=db_name, sql=sql_content.strip()
-        )
-    except Exception as e:
-        result["status"] = 1
-        result["msg"] = str(e)
-        return HttpResponse(json.dumps(result), content_type="application/json")
-
-    # 处理检测结果
-    result["data"]["rows"] = check_result.to_dict()
-    result["data"]["CheckWarningCount"] = check_result.warning_count
-    result["data"]["CheckErrorCount"] = check_result.error_count
-    return HttpResponse(json.dumps(result), content_type="application/json")
-
-
-@permission_required("sql.sql_submit", raise_exception=True)
-def submit(request):
-    """正式提交SQL, 此处生成工单"""
-    sql_content = request.POST.get("sql_content").strip()
-    workflow_title = request.POST.get("workflow_name")
-    demand_url = request.POST.get("demand_url", "")
-    # 检查用户是否有权限涉及到资源组等， 比较复杂， 可以把检查权限改成一个独立的方法
-    group_name = request.POST.get("group_name")
-    group_id = ResourceGroup.objects.get(group_name=group_name).group_id
-    instance_name = request.POST.get("instance_name")
-    instance = Instance.objects.get(instance_name=instance_name)
-    db_name = request.POST.get("db_name")
-    is_backup = True if request.POST.get("is_backup") == "True" else False
-    cc_users = request.POST.getlist("cc_users")
-    run_date_start = request.POST.get("run_date_start")
-    run_date_end = request.POST.get("run_date_end")
-
-    # 服务器端参数验证
-    if None in [sql_content, db_name, instance_name, db_name, is_backup, demand_url]:
-        context = {"errMsg": "页面提交参数可能为空"}
-        return render(request, "error.html", context)
-
-    # 验证组权限（用户是否在该组、该组是否有指定实例）
-    try:
-        user_instances(request.user, tag_codes=["can_write"]).get(
-            instance_name=instance_name
-        )
-    except instance.DoesNotExist:
-        context = {"errMsg": "你所在组未关联该实例！"}
-        return render(request, "error.html", context)
-
-    # 再次交给engine进行检测，防止绕过
-    try:
-        check_engine = get_engine(instance=instance)
-        check_result = check_engine.execute_check(
-            db_name=db_name, sql=sql_content.strip()
-        )
-    except Exception as e:
-        context = {"errMsg": str(e)}
-        return render(request, "error.html", context)
-
-    # 未开启备份选项，并且engine支持备份，强制设置备份
-    sys_config = SysConfig()
-    if not sys_config.get("enable_backup_switch") and check_engine.auto_backup:
-        is_backup = True
-
-    # 按照系统配置确定是自动驳回还是放行
-    auto_review_wrong = sys_config.get(
-        "auto_review_wrong", ""
-    )  # 1表示出现警告就驳回，2和空表示出现错误才驳回
-    workflow_status = "workflow_manreviewing"
-    if check_result.warning_count > 0 and auto_review_wrong == "1":
-        workflow_status = "workflow_autoreviewwrong"
-    elif check_result.error_count > 0 and auto_review_wrong in ("", "1", "2"):
-        workflow_status = "workflow_autoreviewwrong"
-
-    # 调用工作流生成工单
-    # 使用事务保持数据一致性
-    try:
-        with transaction.atomic():
-            # 存进数据库里
-            sql_workflow = SqlWorkflow.objects.create(
-                workflow_name=workflow_title,
-                demand_url=demand_url,
-                group_id=group_id,
-                group_name=group_name,
-                engineer=request.user.username,
-                engineer_display=request.user.display,
-                audit_auth_groups=Audit.settings(
-                    group_id, WorkflowDict.workflow_type["sqlreview"]
-                ),
-                status=workflow_status,
-                is_backup=is_backup,
-                instance=instance,
-                db_name=db_name,
-                is_manual=0,
-                syntax_type=check_result.syntax_type,
-                create_time=timezone.now(),
-                run_date_start=run_date_start or None,
-                run_date_end=run_date_end or None,
-            )
-            SqlWorkflowContent.objects.create(
-                workflow=sql_workflow,
-                sql_content=sql_content,
-                review_content=check_result.json(),
-                execute_result="",
-            )
-            workflow_id = sql_workflow.id
-            # 自动审核通过了，才调用工作流
-            if workflow_status == "workflow_manreviewing":
-                # 调用工作流插入审核信息, SQL上线权限申请workflow_type=2
-                Audit.add(WorkflowDict.workflow_type["sqlreview"], workflow_id)
-    except Exception as msg:
-        logger.error(f"提交工单报错，错误信息：{traceback.format_exc()}")
-        context = {"errMsg": msg}
-        logger.error(traceback.format_exc())
-        return render(request, "error.html", context)
-    else:
-        # 自动审核通过且开启了Apply阶段通知参数才发送消息通知
-        is_notified = (
-            "Apply" in sys_config.get("notify_phase_control").split(",")
-            if sys_config.get("notify_phase_control")
-            else True
-        )
-        if workflow_status == "workflow_manreviewing" and is_notified:
-            # 获取审核信息
-            audit_id = Audit.detail_by_workflow_id(
-                workflow_id=workflow_id,
-                workflow_type=WorkflowDict.workflow_type["sqlreview"],
-            ).audit_id
-            async_task(
-                notify_for_audit,
-                audit_id=audit_id,
-                cc_users=cc_users,
-                timeout=60,
-                task_name=f"sqlreview-submit-{workflow_id}",
-            )
-
-    return HttpResponseRedirect(reverse("sql:detail", args=(workflow_id,)))
-
-
 def detail_content(request):
     """获取工单内容"""
     workflow_id = request.GET.get("workflow_id")
diff --git a/sql/templates/sqlsubmit.html b/sql/templates/sqlsubmit.html
index 7dd2622d8f..73aa19b43d 100644
--- a/sql/templates/sqlsubmit.html
+++ b/sql/templates/sqlsubmit.html
@@ -8,7 +8,7 @@
                     SQL上线
                 </div>
                 <div class="panel-body">
-                    <form id="form-submitsql" action="/autoreview/" method="post" class="form-horizontal" role="form">
+                    <form id="form-submitsql" class="form-horizontal">
                         {% csrf_token %}
                         <input type="hidden" id="workflow_id" name="workflow_id"/>
                         <div class="col-md-9 column">
@@ -32,7 +32,8 @@
                                        required>
                             </div>
                             <div class="form-group">
-                                <input id="demand_url" type="text" autocomplete="off" name="demand_url" class="form-control"
+                                <input id="demand_url" type="text" autocomplete="off" name="demand_url"
+                                       class="form-control"
                                        data-name="需求链接" data-placeholder="请提供需求链接，记录工单需求信息！"
                                        placeholder="请输入需求链接">
                             </div>
@@ -43,7 +44,8 @@
                                         title="请选择组"
                                         data-live-search="true" data-live-search-placeholder="搜索您所在的组" required>
                                     {% for group in group_list %}
-                                        <option value="{{ group.group_name }}">{{ group.group_name }}</option>
+                                        <option value="{{ group.group_name }}"
+                                                group-id="{{ group.group_id }}">{{ group.group_name }}</option>
                                     {% endfor %}
                                 </select>
                             </div>
@@ -67,7 +69,7 @@
                                 <select id="db_name" name="db_name"
                                         class="form-control selectpicker show-tick bs-select-hidden"
                                         data-name="数据库" data-placeholder="请选择数据库！"
-                                        data-live-search="true"  data-live-search-placeholder="搜索要提交的数据库"
+                                        data-live-search="true" data-live-search-placeholder="搜索要提交的数据库"
                                         title="请选择数据库"
                                         required>
                                     <option value="is-empty" disabled="" selected="selected">请选择数据库:</option>
@@ -98,21 +100,6 @@
                                             class="glyphicon glyphicon-time"></span></span>
                                 </div>
                             </div>
-                            <!--增加通知人-->
-                            <!--TODO 通知人落库，允许查看工单详细-->
-                            <div class="form-group" style="display: none">
-                                <select id="cc_users" name="cc_users"
-                                        class="selectpicker show-tick form-control bs-select-hidden "
-                                        multiple="multiple"
-                                        data-name="通知人"
-                                        data-live-search="true"
-                                        data-selected-text-format="count > 2"
-                                        data-none-selected-text="可选择通知人(仅申请通知)">
-                                    {% for user_info in active_user %}
-                                        <option value="{{ user_info.username }}">{{ user_info.display }}({{ user_info.username }})</option>
-                                    {% endfor %}
-                                </select>
-                            </div>
                             <!--审批流程-->
                             <input type="hidden" id="workflow_auditors" name="workflow_auditors" data-name="审批流程"
                                    data-placeholder="请配置审批流程！" required>
@@ -121,9 +108,14 @@
                             </div>
                             <!--button-->
                             <div class="form-group">
-                                <input id="btn-format" type="button" class="btn btn-info" value="美化"/>
-                                <input type="button" id="btn-autoreview" class="btn btn-danger" value="SQL检测"/>
-                                <input id="btn-submitsql" type="button" class="btn btn-success" value="SQL提交"/>
+                                <button type="button" id="btn-format" class="btn btn-info">美化</button>
+                                <button type="button" id="btn-autoreview" data-loading-text="检测中..."
+                                        class="btn btn-danger">SQL检测
+                                </button>
+                                <button type="button" id="btn-submitsql" data-loading-text="提交中..."
+                                        class="btn btn-success disabled" disabled>
+                                    SQL提交
+                                </button>
                             </div>
                         </div>
                     </form>
@@ -146,7 +138,7 @@
         </div>
     </div>
     <!-- 审核信息确认 -->
-    <div class="modal fade" id="submitComfirm" tabindex="-1" role="dialog" aria-labelledby="myModalLabel">
+    <div class="modal fade" id="submitConfirm" tabindex="-1" role="dialog" aria-labelledby="myModalLabel">
         <div class="modal-dialog" role="document">
             <div class="modal-content">
                 <div class="modal-header ">
@@ -160,7 +152,7 @@ <h4 class="modal-title text-danger">提交信息确认</h4>
                 </div>
                 <div class="modal-footer">
                     <button type="button" class="btn btn-info" data-dismiss="modal">取消</button>
-                    <button id="submitsqlcomfirm" type="button" class="btn btn-danger" data-dismiss="modal">确定提交
+                    <button id="submitsqlconfirm" type="button" class="btn btn-danger" data-dismiss="modal">确定提交
                     </button>
                 </div>
             </div>
@@ -267,7 +259,10 @@ <h4 class="modal-title text-danger">提交信息确认</h4>
         $("#instance_name").change(function () {
             var optgroup = $('#instance_name :selected').parent().attr('label');
             $("#div-backup").show();
-            if (optgroup != "MySQL" && optgroup != "Oracle") {$("#div-backup").hide(); $("#is_backup").val("False");}
+            if (optgroup != "MySQL" && optgroup != "Oracle") {
+                $("#div-backup").hide();
+                $("#is_backup").val("False");
+            }
             //将数据通过ajax提交给获取db_name
             $.ajax({
                 type: "get",
@@ -372,219 +367,242 @@ <h4 class="modal-title text-danger">提交信息确认</h4>
                 editor.clearSelection();
             }
         );
-
-        //SQL提交
-        $("#btn-submitsql").click(function () {
-            //获取form对象，判断输入，通过则提交
-            var formSubmit = $("#form-submitsql");
-            var sqlContent = editor.getValue();
-            $("#sql_content").val(sqlContent);
-            if (validateForm(formSubmit) && checkRunDate()) {
-                //判断是否需要弹出提示
-                var CheckWarningCount = sessionStorage.getItem('CheckWarningCount');
-                var CheckErrorCount = sessionStorage.getItem('CheckErrorCount');
-                $("#CheckWarningCount").text(CheckWarningCount);
-                $("#CheckErrorCount").text(CheckErrorCount);
-                if (CheckWarningCount > 0 || CheckErrorCount > 0) {
-                    $('#submitComfirm').modal('show');
-                } else {
-                    formSubmit.submit();
-                    $('input[type=button]').addClass('disabled');
-                    $('input[type=button]').prop('disabled', true);
-                }
-            }
-        });
-
-        //提交二次确认
-        $("#submitsqlcomfirm").click(function () {
-            //获取form对象，判断输入，通过则提交
-            var formSubmit = $("#form-submitsql");
-            var sqlContent = editor.getValue();
-            $("#sql_content").val(sqlContent);
-            formSubmit.submit();
-            $('input[type=button]').addClass('disabled');
-            $('input[type=button]').prop('disabled', true);
-        });
-
-        //审批流程控制
-        $("#audit_auth_groups").change(function audit_auth_groups() {
-            var audit_auth_groups = $(this).val();
-            $("div#" + audit_auth_groups).hide();
-        });
     </script>
     <!--check-->
     <script>
-        function checkRunDate(gap=60) {
+        editor.on('change', function () {
+            $('#btn-submitsql').addClass('disabled').prop("disabled", this);
+        });
+
+        function checkRunDate(gap = 60) {
             // 结束时间与开始时间的间隔不应该太短
-            var start=$("#run_date_start").val();
-            var end=$("#run_date_end").val();
+            var start = $("#run_date_start").val();
+            var end = $("#run_date_end").val();
             if (start && end) {
-                var realGap = ((new Date(end)).getTime() - (new Date(start)).getTime())/(1000*60)
-                if ( realGap >= gap){
+                var realGap = ((new Date(end)).getTime() - (new Date(start)).getTime()) / (1000 * 60)
+                if (realGap >= gap) {
                     return true
                 } else {
-                    alert("可执行时间范围不应该短于"+gap+"分钟");
+                    alert("可执行时间范围不应该短于" + gap + "分钟");
                     return false
                 }
             }
             return true
-        };
+        }
 
         $("#btn-autoreview").click(function () {
-            $('input[type=button]').addClass('disabled');
-            $('input[type=button]').prop('disabled', true);
             //先做表单验证，成功了提交ajax给后端
-            let formSubmit = $("#form-submitsql");
-            var sqlContent = editor.getValue();
-            $("#sql_content").val(sqlContent);
-            if (validateForm(formSubmit) && checkRunDate()) {
+            $("#sql_content").val(editor.getValue());
+            if (validateForm($("#form-submitsql")) && checkRunDate()) {
                 autoreview();
-            } else {
-                $("#btn-format").removeClass('disabled');
-                $("#btn-format").prop('disabled', false);
-                $("#btn-autoreview").removeClass('disabled');
-                $("#btn-autoreview").prop('disabled', false);
             }
         });
 
+        //SQL提交
+        $("#btn-submitsql").click(function () {
+            //获取form对象，判断输入，通过则提交
+            $("#sql_content").val(editor.getValue());
+            if (validateForm($("#form-submitsql")) && checkRunDate()) {
+                //判断是否需要弹出提示
+                var CheckWarningCount = sessionStorage.getItem('CheckWarningCount');
+                var CheckErrorCount = sessionStorage.getItem('CheckErrorCount');
+                $("#CheckWarningCount").text(CheckWarningCount);
+                $("#CheckErrorCount").text(CheckErrorCount);
+                if (CheckWarningCount > 0 || CheckErrorCount > 0) {
+                    $('#submitConfirm').modal('show');
+                } else {
+                    sqlSubmit()
+                }
+            }
+        });
+
+        //提交二次确认
+        $("#submitsqlconfirm").click(function () {
+            sqlSubmit()
+        });
+
         function autoreview() {
             //将数据通过ajax提交给后端进行检查
             $.ajax({
                 type: "post",
-                url: "/simplecheck/",
+                url: "/api/v1/workflow/sqlcheck/",
                 dataType: "json",
-                data: {
-                    sql_content: editor.getValue(),
-                    instance_name: $("#instance_name").val(),
+                contentType: 'application/json;',
+                data: JSON.stringify({
+                    full_sql: editor.getValue(),
+                    instance_id: $("#instance_name option:selected").attr("instance-id"),
                     db_name: $("#db_name").val()
+                }),
+                beforeSend: function (xhr) {
+                    $('#btn-autoreview').button('loading')
                 },
                 complete: function () {
-                    $("#btn-format").removeClass('disabled');
-                    $("#btn-format").prop('disabled', false);
-                    $("#btn-autoreview").removeClass('disabled');
-                    $("#btn-autoreview").prop('disabled', false);
+                    $('#btn-autoreview').button('reset')
                 },
                 success: function (data) {
-                    if (data.status === 0) {
-                        var result = data.data;
-                        //初始化表结构显示
-                        // 异步获取要动态生成的列
-                        var columns = [];
-                        $.each(result['column_list'], function (i, column) {
-                            columns.push({"field": i, "title": column, "sortable": true});
-                        });
-                        $("#inception-result").bootstrapTable('destroy').bootstrapTable({
-                                data: result['rows'],
-                                columns: [{
-                                    title: 'ID',
-                                    field: 'id',
-                                    sortable: true
-                                }, {
-                                    title: 'SQL语句',
-                                    field: 'sql',
-                                    formatter: function (value, row, index) {
-                                        var sql = value.replace(/\n/g, '<br>').replace(/\s/g, '&nbsp;');
-                                        if (value.length > 50) {
-                                            return sql.substr(0, 50) + '...';
-                                        } else {
-                                            return sql
-                                        }
-                                    }
-                                }, {
-                                    title: '扫描/影响行数',
-                                    field: 'affected_rows',
-                                    sortable: true
-                                }, {
-                                    title: '审核状态',
-                                    field: 'errlevel',
-                                    sortable: true,
-                                    formatter: function (value, row, index) {
-                                        if (String(value) === '0') {
-                                            return 'pass'
-                                        } else if (String(value) === '1') {
-                                            return 'warning'
-                                        } else if (String(value) === '2') {
-                                            return 'error'
-                                        }
+                    var result = data;
+                    //初始化表结构显示
+                    // 异步获取要动态生成的列
+                    var columns = [];
+                    $.each(result['column_list'], function (i, column) {
+                        columns.push({"field": i, "title": column, "sortable": true});
+                    });
+                    $("#inception-result").bootstrapTable('destroy').bootstrapTable({
+                            data: result['rows'],
+                            columns: [{
+                                title: 'ID',
+                                field: 'id',
+                                sortable: true
+                            }, {
+                                title: 'SQL语句',
+                                field: 'sql',
+                                formatter: function (value, row, index) {
+                                    var sql = value.replace(/\n/g, '<br>').replace(/\s/g, '&nbsp;');
+                                    if (value.length > 50) {
+                                        return sql.substr(0, 50) + '...';
+                                    } else {
+                                        return sql
                                     }
-                                }, {
-                                    title: '审核信息',
-                                    field: 'errormessage',
-                                    formatter: function (value, row, index) {
-                                        if (value === null) {
-                                            return value
-                                        }
-                                        return value.replace(/\n/g, '<br>');
+                                }
+                            }, {
+                                title: '扫描/影响行数',
+                                field: 'affected_rows',
+                                sortable: true
+                            }, {
+                                title: '审核状态',
+                                field: 'errlevel',
+                                sortable: true,
+                                formatter: function (value, row, index) {
+                                    if (String(value) === '0') {
+                                        return 'pass'
+                                    } else if (String(value) === '1') {
+                                        return 'warning'
+                                    } else if (String(value) === '2') {
+                                        return 'error'
                                     }
-                                }],
-                                rowStyle: function (row, index) {
-                                    var style = "";
-                                    if (row.errlevel === 1) {
-                                        style = 'warning';
-                                    } else if (row.errlevel === 2) {
-                                        style = 'danger';
+                                }
+                            }, {
+                                title: '审核信息',
+                                field: 'errormessage',
+                                formatter: function (value, row, index) {
+                                    if (value === null) {
+                                        return value
                                     }
-                                    return {classes: style}
-                                },
-                                escape: true,                       // 转义HTML字符串，替换 &, <, >, ", \`, 和 ' 字符。
-                                striped: true,                      //是否显示行间隔色
-                                cache: false,                       //是否使用缓存，默认为true，所以一般情况下需要设置一下这个属性（*）
-                                sortable: true,                     //是否启用排序
-                                //sortOrder: "desc",                   //排序方式
-                                //sortName: 'errormessage',           //排序字段
-                                pagination: true,                   //是否显示分页（*）
-                                sidePagination: "client",           //分页方式：client客户端分页，server服务端分页（*）
-                                pageNumber: 1,                      //初始化加载第一页，默认第一页,并记录
-                                pageSize: 500,                     //每页的记录行数（*）
-                                pageList: [500, 1000, 5000],       //可供选择的每页的行数（*）
-                                search: true,                      //是否显示表格搜索
-                                strictSearch: false,                //是否全匹配搜索
-                                showColumns: true,                  //是否显示所有的列（选择显示的列）
-                                showRefresh: false,                  //是否显示刷新按钮
-                                showExport: true,
-                                exportDataType: "all",
-                                minimumCountColumns: 1,             //最少允许的列数
-                                uniqueId: "id",                     //每一行的唯一标识，一般为主键列
-                                showToggle: true,                   //是否显示详细视图和列表视图的切换按钮
-                                cardView: false,                    //是否显示详细视图
-                                detailView: true,                  //是否显示父子表
-                                //格式化详情
-                                detailFormatter: function (index, row) {
-                                    var html = [];
-                                    $.each(row, function (key, value) {
-                                        if (key === 'sql') {
-                                            //let sql = window.sqlFormatter.format(key);
-                                            let sql = value;
-                                            //替换标签
-                                            sql = sql.replace(/&/g, "&amp;");
-                                            sql = sql.replace(/</g, "&lt;");
-                                            sql = sql.replace(/>/g, "&gt;");
-                                            sql = sql.replace(/"/g, "&quot;");
-                                            //替换所有的换行符
-                                            sql = sql.replace(/\r\n/g, "<br>");
-                                            sql = sql.replace(/\n/g, "<br>");
-                                            //替换所有的空格
-                                            sql = sql.replace(/\s/g, "&nbsp;");
-                                            html.push('<span>' + sql + '</span>');
-
-                                        }
-                                    });
-                                    return html.join('');
+                                    return value.replace(/\n/g, '<br>');
                                 }
+                            }],
+                            rowStyle: function (row, index) {
+                                var style = "";
+                                if (row.errlevel === 1) {
+                                    style = 'warning';
+                                } else if (row.errlevel === 2) {
+                                    style = 'danger';
+                                }
+                                return {classes: style}
+                            },
+                            escape: true,                       // 转义HTML字符串，替换 &, <, >, ", \`, 和 ' 字符。
+                            striped: true,                      //是否显示行间隔色
+                            cache: false,                       //是否使用缓存，默认为true，所以一般情况下需要设置一下这个属性（*）
+                            sortable: true,                     //是否启用排序
+                            //sortOrder: "desc",                   //排序方式
+                            //sortName: 'errormessage',           //排序字段
+                            pagination: true,                   //是否显示分页（*）
+                            sidePagination: "client",           //分页方式：client客户端分页，server服务端分页（*）
+                            pageNumber: 1,                      //初始化加载第一页，默认第一页,并记录
+                            pageSize: 500,                     //每页的记录行数（*）
+                            pageList: [500, 1000, 5000],       //可供选择的每页的行数（*）
+                            search: true,                      //是否显示表格搜索
+                            strictSearch: false,                //是否全匹配搜索
+                            showColumns: true,                  //是否显示所有的列（选择显示的列）
+                            showRefresh: false,                  //是否显示刷新按钮
+                            showExport: true,
+                            exportDataType: "all",
+                            minimumCountColumns: 1,             //最少允许的列数
+                            uniqueId: "id",                     //每一行的唯一标识，一般为主键列
+                            showToggle: true,                   //是否显示详细视图和列表视图的切换按钮
+                            cardView: false,                    //是否显示详细视图
+                            detailView: true,                  //是否显示父子表
+                            //格式化详情
+                            detailFormatter: function (index, row) {
+                                var html = [];
+                                $.each(row, function (key, value) {
+                                    if (key === 'sql') {
+                                        //let sql = window.sqlFormatter.format(key);
+                                        let sql = value;
+                                        //替换标签
+                                        sql = sql.replace(/&/g, "&amp;");
+                                        sql = sql.replace(/</g, "&lt;");
+                                        sql = sql.replace(/>/g, "&gt;");
+                                        sql = sql.replace(/"/g, "&quot;");
+                                        //替换所有的换行符
+                                        sql = sql.replace(/\r\n/g, "<br>");
+                                        sql = sql.replace(/\n/g, "<br>");
+                                        //替换所有的空格
+                                        sql = sql.replace(/\s/g, "&nbsp;");
+                                        html.push('<span>' + sql + '</span>');
+
+                                    }
+                                });
+                                return html.join('');
                             }
-                        );
-                        //记录审核结果
-                        sessionStorage.setItem('CheckWarningCount', result['CheckWarningCount']);
-                        sessionStorage.setItem('CheckErrorCount', result['CheckErrorCount']);
-                        $("#inception-result").show();
-                        $('input[type=button]').removeClass('disabled');
-                        $('input[type=button]').prop('disabled', false);
+                        }
+                    );
+                    //记录审核结果
+                    sessionStorage.setItem('CheckWarningCount', result.warning_count);
+                    sessionStorage.setItem('CheckErrorCount', result.error_count);
+                    $("#inception-result").show();
+                    $('#btn-submitsql').button('reset').removeClass('disabled').prop("disabled", false);
+                },
+                error: function (XMLHttpRequest, textStatus, errorThrown) {
+                    if (XMLHttpRequest.responseJSON) {
+                        alert(XMLHttpRequest.responseText)
                     } else {
-                        alert(data.msg);
+                        alert(errorThrown);
                     }
+                }
+            });
+
+        }
+
+        function sqlSubmit() {
+            let formData = $('#form-submitsql').serializeArray().reduce(function (obj, item) {
+                obj[item.name] = item.value;
+                return obj;
+            }, {})
+            $.ajax({
+                type: "post",
+                url: "/api/v1/workflow/",
+                dataType: "json",
+                contentType: 'application/json;',
+                data: JSON.stringify({
+                        workflow: {
+                            workflow_name: formData.workflow_name,
+                            demand_url: formData.demand_url,
+                            group_id: $("#group_name option:selected").attr("group-id"),
+                            instance: $("#instance_name option:selected").attr("instance-id"),
+                            db_name: formData.db_name,
+                            is_backup: formData.is_backup === 'True',
+                            run_date_start: formData.run_date_start,
+                            run_date_end: formData.run_date_end,
+                        },
+                        sql_content: formData.sql_content
+                    }
+                ),
+                beforeSend: function (xhr) {
+                    $('#btn-submitsql').button('loading')
+                },
+                complete: function () {
+                    $('#btn-submitsql').button('reset')
+                },
+                success: function (data) {
+                    window.location.href = "/detail/"+ data.workflow_id
                 },
                 error: function (XMLHttpRequest, textStatus, errorThrown) {
-                    alert(errorThrown);
+                    if (XMLHttpRequest.responseJSON) {
+                        alert(XMLHttpRequest.responseText)
+                    } else {
+                        alert(errorThrown);
+                    }
                 }
             });
 
@@ -614,40 +632,16 @@ <h4 class="modal-title text-danger">提交信息确认</h4>
                 },
                 success: function (data) {
                     if (data.status === 0) {
-                        var result = data['data'];
-                        $("#optgroup-mysql").empty();
-                        $("#optgroup-oracle").empty();
-                        $("#optgroup-mssql").empty();
-                        $("#optgroup-redis").empty();
-                        $("#optgroup-pgsql").empty();
-                        $("#optgroup-phoenix").empty();
-                        $("#optgroup-mongo").empty();
-                        $("#optgroup-clickhouse").empty();
-                        for (var i = 0; i < result.length; i++) {
-                            var instance = "<option value=\"" + result[i]['instance_name'] + "\">" + result[i]['instance_name'] + "</option>";
-                            if (result[i]['db_type'] === 'mysql') {
-                                $("#optgroup-mysql").append(instance);
-                            } else if (result[i]['db_type'] === 'mssql') {
-                                $("#optgroup-mssql").append(instance);
-                            } else if (result[i]['db_type'] === 'redis') {
-                                $("#optgroup-redis").append(instance);
-                            } else if (result[i]['db_type'] === 'pgsql') {
-                                $("#optgroup-pgsql").append(instance);
-                            } else if (result[i]['db_type'] === 'oracle') {
-                                $("#optgroup-oracle").append(instance);
-                            } else if (result[i]['db_type'] === 'mongo') {
-                                $("#optgroup-mongo").append(instance);
-                            } else if (result[i]['db_type'] === 'phoenix') {
-                                $("#optgroup-phoenix").append(instance);
-                            } else if (result[i]['db_type'] === 'clickhouse') {
-                                $("#optgroup-clickhouse").append(instance);
+                        let result = data['data']
+                        const supportDb = ['mysql', 'mssql', 'redis', 'pgsql', 'oracle', 'mongo', 'phoenix', 'clickhouse']
+                        for (let i of result) {
+                            let instance = "<option value=\"" + i.instance_name + "\" instance-id=" + i.id + ">" + i.instance_name + "</option>";
+                            if (supportDb.indexOf(i.db_type) !== -1) {
+                                $("#optgroup-" + i.db_type).append(instance);
                             }
                         }
-                        $('#instance_name').selectpicker('render');
-                        $('#instance_name').selectpicker('refresh');
-                        $("#db_name").empty();
-                        $('#db_name').selectpicker('render');
-                        $('#db_name').selectpicker('refresh');
+                        $('#instance_name').selectpicker('render').selectpicker('refresh');
+                        $("#db_name").empty().selectpicker('render').selectpicker('refresh');
                     } else {
                         alert(data.msg);
                     }
@@ -687,9 +681,6 @@ <h4 class="modal-title text-danger">提交信息确认</h4>
         $(document).ready(function () {
             // 初始化上传控件
             init_upload();
-            // 禁用提交按钮，点击检测后才激活
-            $("#btn-submitsql").addClass('disabled');
-            $("#btn-submitsql").prop('disabled', true);
             // 清空id, 只允许新增不允许修改
             sessionStorage.removeItem('editWorkflowDetailId');
             var pathname = window.location.pathname;
diff --git a/sql/tests.py b/sql/tests.py
index c2fb567cc0..c8a3067b66 100644
--- a/sql/tests.py
+++ b/sql/tests.py
@@ -1430,165 +1430,6 @@ def testWorkflowStatus(self):
         r_json = r.json()
         self.assertEqual(r_json["status"], "workflow_finish")
 
-    def test_check_param_is_None(self):
-        """测试工单检测，参数内容为空"""
-        c = Client()
-        c.force_login(self.superuser1)
-        data = {"instance_name": self.master1.instance_name}
-        r = c.post("/simplecheck/", data=data)
-        self.assertDictEqual(
-            json.loads(r.content), {"status": 1, "msg": "页面提交参数可能为空", "data": {}}
-        )
-
-    @patch("sql.sql_workflow.get_engine")
-    def test_check_inception_Exception(self, _get_engine):
-        """测试工单检测，inception报错"""
-        c = Client()
-        c.force_login(self.superuser1)
-        data = {
-            "sql_content": "update sql_users set email = ''where id > 0;",
-            "instance_name": self.master1.instance_name,
-            "db_name": "archery",
-        }
-        _get_engine.side_effect = RuntimeError("RuntimeError")
-        r = c.post("/simplecheck/", data=data)
-        self.assertDictEqual(
-            json.loads(r.content), {"status": 1, "msg": "RuntimeError", "data": {}}
-        )
-
-    @patch("sql.sql_workflow.get_engine")
-    def test_check(self, _get_engine):
-        """测试工单检测，正常返回"""
-        c = Client()
-        c.force_login(self.superuser1)
-        data = {
-            "sql_content": "update sql_users set email = ''where id > 0;",  #
-            "instance_name": self.master1.instance_name,
-            "db_name": "archery",
-        }
-        column_list = [
-            "id",
-            "stage",
-            "errlevel",
-            "stagestatus",
-            "errormessage",
-            "sql",
-            "affected_rows",
-            "sequence",
-            "backup_dbname",
-            "execute_time",
-            "sqlsha1",
-            "backup_time",
-            "actual_affected_rows",
-        ]
-
-        rows = [
-            ReviewResult(
-                id=1,
-                stage="CHECKED",
-                errlevel=0,
-                stagestatus="Audit Completed",
-                errormessage="",
-                sql="use `archer`",
-                affected_rows=0,
-                actual_affected_rows=0,
-                sequence="0_0_00000000",
-                backup_dbname="",
-                execute_time="0",
-                sqlsha1="",
-            )
-        ]
-        _get_engine.return_value.execute_check.return_value = ReviewSet(
-            warning_count=0, error_count=0, column_list=column_list, rows=rows
-        )
-        r = c.post("/simplecheck/", data=data)
-        self.assertListEqual(
-            list(json.loads(r.content)["data"].keys()),
-            ["rows", "CheckWarningCount", "CheckErrorCount"],
-        )
-        self.assertListEqual(
-            list(json.loads(r.content)["data"]["rows"][0].keys()), column_list
-        )
-
-    def test_submit_param_is_None(self):
-        """测试SQL提交，参数内容为空"""
-        c = Client()
-        c.force_login(self.superuser1)
-        data = {
-            "sql_content": "update sql_users set email='' where id>0;",
-            "workflow_name": "【回滚工单】原工单Id:163+,3434434343",
-            "group_name": self.resource_group1.group_name,
-            "instance_name": self.master1.instance_name,
-            "run_date_start": "",
-            "run_date_end": "",
-            "workflow_auditors": "11",
-        }
-        r = c.post("/autoreview/", data=data)
-        self.assertContains(r, "页面提交参数可能为空")
-
-    @patch("sql.sql_workflow.async_task")
-    @patch("sql.sql_workflow.Audit")
-    @patch("sql.sql_workflow.get_engine")
-    @patch("sql.sql_workflow.user_instances")
-    def test_submit_audit_wrong(
-        self, _user_instances, _get_engine, _audit, _async_task
-    ):
-        """测试SQL提交，获取审核信息报错"""
-        c = Client()
-        c.force_login(self.superuser1)
-        data = {
-            "sql_content": "update sql_users set email='' where id>0;",
-            "workflow_name": "【回滚工单】原工单Id:163+,3434434343",
-            "group_name": self.resource_group1.group_name,
-            "instance_name": self.master1.instance_name,
-            "db_name": "archery",
-            "demand_url": "test_url",
-            "run_date_start": "",
-            "run_date_end": "",
-            "workflow_auditors": "11",
-        }
-        _user_instances.return_value.get.return_value = self.master1
-        _get_engine.return_value.execute_check.return_value = ReviewSet(
-            syntax_type=1, warning_count=1, error_count=1
-        )
-        _audit.settings = ValueError("error")
-        _audit.add.return_value = None
-        _async_task.return_value = None
-        r = c.post("/autoreview/", data=data)
-        self.assertContains(r, "ValueError")
-
-    @patch("sql.sql_workflow.async_task")
-    @patch("sql.sql_workflow.Audit")
-    @patch("sql.sql_workflow.get_engine")
-    @patch("sql.sql_workflow.user_instances")
-    def test_submit(self, _user_instances, _get_engine, _audit, _async_task):
-        """测试SQL提交，正常提交"""
-        c = Client()
-        c.force_login(self.superuser1)
-        data = {
-            "sql_content": "update sql_users set email='' where id>0;",
-            "workflow_name": "【回滚工单】原工单Id:163+,3434434343",
-            "group_name": self.resource_group1.group_name,
-            "instance_name": self.master1.instance_name,
-            "db_name": "archery",
-            "demand_url": "test_url",
-            "run_date_start": "",
-            "run_date_end": "",
-            "workflow_auditors": "11",
-        }
-        _user_instances.return_value.get.return_value = self.master1
-        _get_engine.return_value.execute_check.return_value = ReviewSet(
-            syntax_type=1, warning_count=1, error_count=1
-        )
-        _audit.settings.return_value = "some_group,another_group"
-        _audit.add.return_value = None
-        _async_task.return_value = None
-        r = c.post("/autoreview/", data=data)
-        workflow_id = SqlWorkflow.objects.order_by("-id").first().id
-        self.assertRedirects(
-            r, f"/detail/{workflow_id}/", fetch_redirect_response=False
-        )
-
     @patch("sql.utils.workflow_audit.Audit.can_review")
     def test_alter_run_date_no_perm(self, _can_review):
         """测试修改可执行时间，无权限"""
@@ -1802,93 +1643,6 @@ def testWorkflowCancelView(self, _can_cancel, _audit, _detail_by_id, _add_log):
         self.wf2.refresh_from_db()
         self.assertEqual("workflow_abort", self.wf2.status)
 
-    @patch("sql.sql_workflow.async_task")
-    @patch("sql.sql_workflow.Audit")
-    @patch("sql.sql_workflow.get_engine")
-    @patch("sql.sql_workflow.user_instances")
-    def test_workflow_auto_review_view(
-        self, mock_user_instances, mock_get_engine, mock_audit, mock_async_task
-    ):
-        """测试 autoreview/submit view"""
-        c = Client()
-        c.force_login(self.superuser1)
-        request_data = {
-            "sql_content": "update some_db set some_key='some value';",
-            "workflow_name": "some_title",
-            "group_name": self.resource_group1.group_name,
-            "group_id": self.resource_group1.group_id,
-            "instance_name": self.master1.instance_name,
-            "demand_url": "test_url",
-            "db_name": "some_db",
-            "is_backup": True,
-            "notify_users": "",
-        }
-        mock_user_instances.return_value.get.return_value = None
-        mock_get_engine.return_value.execute_check.return_value.warning_count = 0
-        mock_get_engine.return_value.execute_check.return_value.error_count = 0
-        mock_get_engine.return_value.execute_check.return_value.syntax_type = 0
-        mock_get_engine.return_value.execute_check.return_value.rows = []
-        mock_get_engine.return_value.execute_check.return_value.json.return_value = (
-            json.dumps(
-                [
-                    {
-                        "id": 1,
-                        "stage": "CHECKED",
-                        "errlevel": 0,
-                        "stagestatus": "Audit completed",
-                        "errormessage": "None",
-                        "sql": "use thirdservice_db",
-                        "affected_rows": 0,
-                        "sequence": "'0_0_0'",
-                        "backup_dbname": "None",
-                        "execute_time": "0",
-                        "sqlsha1": "",
-                        "actual_affected_rows": None,
-                    }
-                ]
-            )
-        )
-        mock_audit.settings.return_value = "some_group,another_group"
-        mock_audit.add.return_value = None
-        mock_async_task.return_value = None
-        r = c.post("/autoreview/", data=request_data, follow=False)
-        self.assertIn("detail", r.url)
-        workflow_id = int(re.search(r"\/detail\/(\d+)\/", r.url).groups()[0])
-        self.assertEqual(
-            request_data["workflow_name"],
-            SqlWorkflow.objects.get(id=workflow_id).workflow_name,
-        )
-
-        # 强制备份测试
-        # 打开备份开关, 对备份不要求
-        request_data_without_backup = {
-            "sql_content": "update some_db set some_key='some value';",
-            "workflow_name": "some_title_2",
-            "group_name": self.resource_group1.group_name,
-            "group_id": self.resource_group1.group_id,
-            "instance_name": self.master1.instance_name,
-            "db_name": "some_db",
-            "demand_url": "test_url",
-            "is_backup": False,
-            "notify_users": "",
-        }
-        archer_config = SysConfig()
-        archer_config.set("enable_backup_switch", "true")
-        r = c.post("/autoreview/", data=request_data_without_backup, follow=False)
-        self.assertIn("detail", r.url)
-        workflow_id = int(re.search(r"\/detail\/(\d+)\/", r.url).groups()[0])
-        self.assertEqual(
-            request_data_without_backup["workflow_name"],
-            SqlWorkflow.objects.get(id=workflow_id).workflow_name,
-        )
-
-        # 关闭备份选项, 不允许不备份
-        archer_config.set("enable_backup_switch", "false")
-        r = c.post("/autoreview/", data=request_data_without_backup, follow=False)
-        self.assertIn("detail", r.url)
-        workflow_id = int(re.search(r"\/detail\/(\d+)\/", r.url).groups()[0])
-        self.assertEqual(SqlWorkflow.objects.get(id=workflow_id).is_backup, True)
-
     @patch("sql.sql_workflow.get_engine")
     def test_osc_control(self, _get_engine):
         """测试MySQL工单osc控制"""
diff --git a/sql/urls.py b/sql/urls.py
index 084313569f..a9d86318b1 100644
--- a/sql/urls.py
+++ b/sql/urls.py
@@ -40,7 +40,6 @@
     path("editsql/", views.submit_sql),
     path("submitotherinstance/", views.submit_sql),
     path("detail/<int:workflow_id>/", views.detail, name="detail"),
-    path("autoreview/", sql_workflow.submit),
     path("passed/", sql_workflow.passed),
     path("execute/", sql_workflow.execute),
     path("timingtask/", sql_workflow.timing_task),
@@ -83,7 +82,6 @@
     path("sqlworkflow_list_audit/", sql_workflow.sql_workflow_list_audit),
     path("sqlworkflow/detail_content/", sql_workflow.detail_content),
     path("sqlworkflow/backup_sql/", sql_workflow.backup_sql),
-    path("simplecheck/", sql_workflow.check),
     path("getWorkflowStatus/", sql_workflow.get_workflow_status),
     path("del_sqlcronjob/", tasks.del_schedule),
     path("inception/osc_control/", sql_workflow.osc_control),
@@ -92,6 +90,7 @@
     path("workflow/list/", workflow.lists),
     path("workflow/log/", workflow.log),
     path("config/change/", config.change_config),
+    path("check/inception/", check.inception),
     path("check/go_inception/", check.go_inception),
     path("check/email/", check.email),
     path("check/instance/", check.instance),
diff --git a/sql/views.py b/sql/views.py
index 15bda95d3b..987abe92fb 100644
--- a/sql/views.py
+++ b/sql/views.py
@@ -17,7 +17,6 @@
 from sql.engines import get_engine
 from common.utils.permission import superuser_required
 from common.utils.convert import Convert
-from sql.engines.models import ReviewResult, ReviewSet
 from sql.utils.tasks import task_info
 
 from .models import (
@@ -163,9 +162,6 @@ def submit_sql(request):
     # 获取组信息
     group_list = user_groups(user)
 
-    # 获取所有有效用户，通知对象
-    active_user = Users.objects.filter(is_active=1)
-
     # 获取系统配置
     archer_config = SysConfig()
 
@@ -175,7 +171,6 @@ def submit_sql(request):
     )
 
     context = {
-        "active_user": active_user,
         "group_list": group_list,
         "enable_backup_switch": archer_config.get("enable_backup_switch"),
     }
diff --git a/sql_api/api_workflow.py b/sql_api/api_workflow.py
index 7bff6b5798..29d715957d 100644
--- a/sql_api/api_workflow.py
+++ b/sql_api/api_workflow.py
@@ -1,4 +1,6 @@
-from rest_framework import views, generics, status, serializers
+from django.contrib.auth.decorators import permission_required
+from django.utils.decorators import method_decorator
+from rest_framework import views, generics, status, serializers, permissions
 from rest_framework.response import Response
 from drf_spectacular.utils import extend_schema
 from .serializers import (
@@ -17,7 +19,6 @@
 from sql.models import (
     SqlWorkflow,
     SqlWorkflowContent,
-    Instance,
     WorkflowAudit,
     Users,
     WorkflowLog,
@@ -43,19 +44,20 @@
 
 
 class ExecuteCheck(views.APIView):
+    permission_classes = [permissions.IsAuthenticated]
+
     @extend_schema(
         summary="SQL检查",
         request=ExecuteCheckSerializer,
         responses={200: ExecuteCheckResultSerializer},
         description="对提供的SQL进行语法检查",
     )
+    @method_decorator(permission_required("sql.sql_submit", raise_exception=True))
     def post(self, request):
         # 参数验证
         serializer = ExecuteCheckSerializer(data=request.data)
-        if not serializer.is_valid():
-            return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST)
-
-        instance = Instance.objects.get(pk=request.data["instance_id"])
+        serializer.is_valid(raise_exception=True)
+        instance = serializer.get_instance()
         check_engine = get_engine(instance=instance)
         check_result = check_engine.execute_check(
             db_name=request.data["db_name"], sql=request.data["full_sql"].strip()
@@ -73,12 +75,37 @@ class WorkflowList(generics.ListAPIView):
     列出所有的workflow或者提交一条新的workflow
     """
 
+    permission_classes = [permissions.IsAuthenticated]
+
     filterset_class = WorkflowFilter
     pagination_class = CustomizedPagination
     serializer_class = WorkflowContentSerializer
-    queryset = (
-        SqlWorkflowContent.objects.all().select_related("workflow").order_by("-id")
-    )
+
+    def get_queryset(self):
+        """
+        1、非管理员，拥有审核权限、资源组粒度执行权限的，可以查看组内所有工单
+        2、管理员，审计员，可查看所有工单
+        """
+        filter_dict = {}
+        user = self.request.user
+        # 管理员，审计员，可查看所有工单
+        if user.is_superuser or user.has_perm("sql.audit_user"):
+            pass
+        # 非管理员，拥有审核权限、资源组粒度执行权限的，可以查看组内所有工单
+        elif user.has_perm("sql.sql_review") or user.has_perm(
+            "sql.sql_execute_for_resource_group"
+        ):
+            filter_dict["group_id__in"] = [
+                group.group_id for group in user_groups(user)
+            ]
+        # 其他人只能查看自己提交的工单
+        else:
+            filter_dict["engineer"] = user.username
+        return (
+            SqlWorkflowContent.objects.filter(**filter_dict)
+            .select_related("workflow")
+            .order_by("-id")
+        )
 
     @extend_schema(
         summary="SQL上线工单清单",
@@ -99,12 +126,12 @@ def get(self, request):
         responses={201: WorkflowContentSerializer},
         description="提交一条SQL上线工单",
     )
+    @method_decorator(permission_required("sql.sql_submit", raise_exception=True))
     def post(self, request):
-        serializer = WorkflowContentSerializer(data=request.data)
-        if serializer.is_valid():
-            serializer.save()
-            return Response(serializer.data, status=status.HTTP_201_CREATED)
-        return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST)
+        serializer = self.get_serializer(data=request.data)
+        serializer.is_valid(raise_exception=True)
+        serializer.save()
+        return Response(serializer.data, status=status.HTTP_201_CREATED)
 
 
 class WorkflowAuditList(generics.ListAPIView):
diff --git a/sql_api/serializers.py b/sql_api/serializers.py
index 93045ad673..a2e888eee5 100644
--- a/sql_api/serializers.py
+++ b/sql_api/serializers.py
@@ -276,6 +276,9 @@ def validate_instance_id(self, instance_id):
             raise serializers.ValidationError({"errors": f"不存在该实例：{instance_id}"})
         return instance_id
 
+    def get_instance(self):
+        return Instance.objects.get(pk=self.validated_data["instance_id"])
+
 
 class ExecuteCheckResultSerializer(serializers.Serializer):
     is_execute = serializers.BooleanField(read_only=True, default=False)
@@ -293,36 +296,37 @@ class ExecuteCheckResultSerializer(serializers.Serializer):
 
 
 class WorkflowSerializer(serializers.ModelSerializer):
-    def validate(self, attrs):
-        engineer = attrs.get("engineer")
-        group_id = attrs.get("group_id")
-
-        try:
-            Users.objects.get(username=engineer)
-        except Users.DoesNotExist:
-            raise serializers.ValidationError(f"不存在该用户：{engineer}")
-
+    def to_internal_value(self, data):
+        if data.get("run_date_start") == "":
+            data["run_date_start"] = None
+        if data.get("run_date_end") == "":
+            data["run_date_end"] = None
+        return super().to_internal_value(data)
+
+    def validate_group_id(self, group_id):
         try:
             ResourceGroup.objects.get(pk=group_id)
         except ResourceGroup.DoesNotExist:
-            raise serializers.ValidationError(f"不存在该资源组：{group_id}")
-
-        return attrs
+            raise serializers.ValidationError({"errors": f"不存在该资源组：{group_id}"})
+        return group_id
 
     class Meta:
         model = SqlWorkflow
         fields = "__all__"
         read_only_fields = [
             "status",
-            "is_backup",
             "syntax_type",
             "audit_auth_groups",
             "engineer_display",
             "group_name",
             "finish_time",
             "is_manual",
+            "engineer",
         ]
-        extra_kwargs = {"demand_url": {"required": False}}
+        extra_kwargs = {
+            "demand_url": {"required": False},
+            "is_backup": {"required": False},
+        }
 
 
 class WorkflowContentSerializer(serializers.ModelSerializer):
@@ -333,9 +337,8 @@ def create(self, validated_data):
         workflow_data = validated_data.pop("workflow")
         instance = workflow_data["instance"]
         sql_content = validated_data["sql_content"].strip()
-        user = Users.objects.get(username=workflow_data["engineer"])
+        user = self.context["request"].user  # 只能提交自己负责的资源
         group = ResourceGroup.objects.get(pk=workflow_data["group_id"])
-        active_user = Users.objects.filter(is_active=1)
 
         # 验证组权限（用户是否在该组、该组是否有指定实例）
         try:
@@ -411,7 +414,6 @@ def create(self, validated_data):
                 async_task(
                     notify_for_audit,
                     audit_id=audit_id,
-                    cc_users=active_user,
                     timeout=60,
                     task_name=f"sqlreview-submit-{workflow.id}",
                 )
diff --git a/sql_api/tests.py b/sql_api/tests.py
index 4c93e6c31a..ea949092b5 100644
--- a/sql_api/tests.py
+++ b/sql_api/tests.py
@@ -348,6 +348,7 @@ def setUp(self):
             workflow_type=2,
             audit_auth_groups=self.group.id,
         )
+        can_submit = Permission.objects.get(codename="sql_submit")
         can_execute_permission = Permission.objects.get(codename="sql_execute")
         can_execute_resource_permission = Permission.objects.get(
             codename="sql_execute_for_resource_group"
@@ -357,6 +358,7 @@ def setUp(self):
         self.user.set_password("test_password")
         self.user.save()
         self.user.user_permissions.add(
+            can_submit,
             can_execute_permission,
             can_execute_resource_permission,
             can_review_permission,