diff --git a/Src/Dlhis.Basic/Device/Controllers/DevicePermissionsController.cs b/Src/Dlhis.Basic/Device/Controllers/DevicePermissionsController.cs
index c2215c57..05ac0ff5 100644
--- a/Src/Dlhis.Basic/Device/Controllers/DevicePermissionsController.cs
+++ b/Src/Dlhis.Basic/Device/Controllers/DevicePermissionsController.cs
@@ -62,6 +62,7 @@ public class DevicePermissionsController : ControllerBase
     /// </summary>
     /// <param name="userNo"></param>
     /// <returns></returns>
+    [AllowAnonymous]
     [HttpGet("canteen/uniqueNos")]
     [IgnoreTenant]
     public async Task<List<string>> GetCanteenDeviceUniqueNosByUserNoAsync(string userNo)