diff --git a/app/controllers/traces/projects_controller.rb b/app/controllers/traces/projects_controller.rb
index 8bd423878..191f04e83 100644
--- a/app/controllers/traces/projects_controller.rb
+++ b/app/controllers/traces/projects_controller.rb
@@ -1,7 +1,9 @@
 class Traces::ProjectsController < Traces::BaseController
+  include OperateProjectAbilityAble
 
   before_action :require_login
   before_action :load_project
+  before_action :authorizate_user_can_edit_project!
 
   def tasks 
     branch_name = params[:branch_name]
diff --git a/app/services/trace/client_service.rb b/app/services/trace/client_service.rb
index 9423b575d..09aa617e1 100644
--- a/app/services/trace/client_service.rb
+++ b/app/services/trace/client_service.rb
@@ -18,6 +18,7 @@ class Trace::ClientService < ApplicationService
     url = URI("#{full_url(url)}")
     http = Net::HTTP.new(url.host, url.port)
     request = Net::HTTP::Post.new(url)
+    request.read_timeout = 1200
     request["Authorization"] = token
     form_data = params[:data].stringify_keys.to_a
     request.set_form form_data, 'multipart/form-data'