diff --git a/source/libs/parser/src/parAuthenticator.c b/source/libs/parser/src/parAuthenticator.c
index 87ad0d62b7c..086700129c6 100644
--- a/source/libs/parser/src/parAuthenticator.c
+++ b/source/libs/parser/src/parAuthenticator.c
@@ -270,6 +270,9 @@ static int32_t authShowCreateView(SAuthCxt* pCxt, SShowCreateViewStmt* pStmt) {
 
 static int32_t authCreateTable(SAuthCxt* pCxt, SCreateTableStmt* pStmt) {
   SNode* pTagCond = NULL;
+  if (IS_SYS_DBNAME(pStmt->dbName)) {
+      return TSDB_CODE_PAR_SYSTABLE_NOT_ALLOWED;
+  }
   // todo check tag condition for subtable
   return checkAuth(pCxt, pStmt->dbName, NULL, AUTH_TYPE_WRITE, &pTagCond);
 }