diff --git a/Src/Dlhis.Basic.Api/IDevicePermissionApi.cs b/Src/Dlhis.Basic.Api/IDevicePermissionApi.cs
index 0792994e..feeb452e 100644
--- a/Src/Dlhis.Basic.Api/IDevicePermissionApi.cs
+++ b/Src/Dlhis.Basic.Api/IDevicePermissionApi.cs
@@ -6,6 +6,7 @@ namespace Dlhis.Basic.Api;
 [EnableRemoteClient(Name = "basic-service", BaseUrl = "${InternalRequest:BasicRequestUrl}")]
 public interface IDevicePermissionApi
 {
+    [Auth]
     [Get("/api/devicepermissions/canteen/uniqueNos")]
     Task<DefaultApiResult<List<string>>> GetCanteenDeviceUniqueNosByUserNoAsync(string userNo);
 }
\ No newline at end of file