diff --git a/frontend/src/components/dialog/repo-api-token-dialog.js b/frontend/src/components/dialog/repo-api-token-dialog.js
index 3578cf2776..bd89ed1f75 100644
--- a/frontend/src/components/dialog/repo-api-token-dialog.js
+++ b/frontend/src/components/dialog/repo-api-token-dialog.js
@@ -62,12 +62,13 @@ class APITokenItem extends React.Component {
             onPermissionChanged={this.onUpdateAPIToken}
           />
         </td>
-        <td>{item.api_token}</td>
         <td>
-          <span
-            className="far fa-copy action-icon"
-            onClick={this.onCopyAPIToken}
-          />
+          <Fragment>
+            <span>{item.api_token}</span>
+            {this.state.isOperationShow &&
+              <span className="far fa-copy action-icon" onClick={this.onCopyAPIToken} />
+            }
+          </Fragment>
         </td>
         <td>
           <span
@@ -95,7 +96,7 @@ class RepoAPITokenDialog extends React.Component {
     super(props);
     this.state = {
       apiTokenList: [],
-      permission: '',
+      permission: 'rw',
       appName: '',
       errorMsg: '',
       loading: true,
@@ -267,8 +268,7 @@ class RepoAPITokenDialog extends React.Component {
                     <th width="22%">{gettext('App Name')}</th>
                     <th width="15%">{gettext('Permission')}</th>
                     <th width="53%">{gettext('Access Token')}</th>
-                    <th width="5%"></th>
-                    <th width="5%"></th>
+                    <th width="10%"></th>
                   </tr>
                 </thead>
                 <tbody>
diff --git a/seahub/api2/endpoints/repo_api_tokens.py b/seahub/api2/endpoints/repo_api_tokens.py
index d172042401..251aabb5d5 100644
--- a/seahub/api2/endpoints/repo_api_tokens.py
+++ b/seahub/api2/endpoints/repo_api_tokens.py
@@ -14,7 +14,7 @@ from seahub.api2.utils import api_error
 
 from seaserv import seafile_api
 
-from seahub.constants import PERMISSION_READ
+from seahub.constants import PERMISSION_READ_WRITE
 from seahub.repo_api_tokens.models import RepoAPITokens
 from seahub.repo_api_tokens.utils import permission_check_admin_owner
 
@@ -40,7 +40,7 @@ class RepoAPITokensView(APIView):
         # resource check
         repo = seafile_api.get_repo(repo_id)
         if not repo:
-            error_msg = _('app_name invalid.')
+            error_msg = _('Library %(repo_id)s not found.' % {'repo_id': repo_id})
             return api_error(status.HTTP_404_NOT_FOUND, error_msg)
 
         # permission check
@@ -63,7 +63,7 @@ class RepoAPITokensView(APIView):
         if repo_permission and repo_permission not in [perm[0] for perm in RepoAPITokens.PERMISSION_CHOICES]:
             error_msg = _('permission invalid.')
             return api_error(status.HTTP_400_BAD_REQUEST, error_msg)
-        repo_permission = repo_permission if repo_permission else PERMISSION_READ
+        repo_permission = repo_permission if repo_permission else PERMISSION_READ_WRITE
 
         # resource check
         repo = seafile_api.get_repo(repo_id)