diff --git a/src/modules/users/users.controller.ts b/src/modules/users/users.controller.ts
index 0707c7e..1c8756f 100755
--- a/src/modules/users/users.controller.ts
+++ b/src/modules/users/users.controller.ts
@@ -26,12 +26,12 @@ import { VerifyOtpDto } from "../auth/DTO/verify-otp.dto";
 
 @Controller("users")
 @ApiTags("users")
-@AuthGuards()
 export class UsersController {
   constructor(private usersService: UsersService) {}
 
   //
   @ApiOperation({ summary: "Get user profile" })
+  @AuthGuards()
   @Get("me")
   getMe(@UserDec("id") userId: string) {
     return this.usersService.getMe(userId);
@@ -39,17 +39,21 @@ export class UsersController {
 
   //
   @ApiOperation({ summary: "Get user financial info" })
+  @AuthGuards()
   @Get("me/financial-info")
   getFinancialInfo(@UserDec("id") userId: string) {
     return this.usersService.getMyFinancialInfo(userId);
   }
 
   @ApiOperation({ summary: "Update user profile" })
+  @AuthGuards()
   @Patch("update-profile")
   updateProfile(@Body() updateProfileDto: UpdateProfileDto, @UserDec("id") userId: string) {
     return this.usersService.updateProfile(userId, updateProfileDto);
   }
+
   @ApiOperation({ summary: "change user email" })
+  @AuthGuards()
   @Patch("change-email")
   changeEmail(@Body() changeEmailDto: ChangeEmailDto, @UserDec("id") userId: string) {
     return this.usersService.changeEmail(userId, changeEmailDto);
@@ -60,19 +64,24 @@ export class UsersController {
   verifyEmail(@Query() queryDto: EmailVerifyQueryDto, @Res({ passthrough: true }) rep: FastifyReply) {
     return this.usersService.verifyEmail(queryDto, rep);
   }
+
   @ApiOperation({ summary: "change user phone" })
+  @AuthGuards()
   @Patch("change-phone")
   changePhone(@Body() changeDto: RequestOtpDto, @UserDec("id") userId: string) {
     return this.usersService.changePhone(userId, changeDto);
   }
 
   @ApiOperation({ summary: "Verify phone" })
+  @AuthGuards()
   @HttpCode(HttpStatus.OK)
   @Patch("verify-phone")
   verifyPhone(@Body() verifyOtpDto: VerifyOtpDto, @UserDec("id") userId: string) {
     return this.usersService.verifyPhone(verifyOtpDto, userId);
   }
+  //
   @ApiOperation({ summary: "Check validity of user field" })
+  @AuthGuards()
   @HttpCode(HttpStatus.OK)
   @Post("check-validity")
   checkValidity(@Body() checkValidityDto: CheckValidityDTO, @UserDec("id") userId: string) {
@@ -80,6 +89,7 @@ export class UsersController {
   }
 
   @ApiOperation({ summary: "Create user group ==> admin route" })
+  @AuthGuards()
   @PermissionsDec(PermissionEnum.ADMINS, PermissionEnum.CUSTOMERS)
   @Post("user-group")
   createUserGroup(@Body() createDto: CreateUserGroupDto) {
@@ -87,6 +97,7 @@ export class UsersController {
   }
 
   @ApiOperation({ summary: "get all user group ==> admin route" })
+  @AuthGuards()
   @PermissionsDec(PermissionEnum.ADMINS, PermissionEnum.CUSTOMERS)
   @Get("user-group")
   UserGroups() {
@@ -94,6 +105,7 @@ export class UsersController {
   }
 
   @ApiOperation({ summary: "get all users ==> admin route" })
+  @AuthGuards()
   @PermissionsDec(PermissionEnum.ADMINS, PermissionEnum.CUSTOMERS)
   @Get()
   Users() {
@@ -101,6 +113,7 @@ export class UsersController {
   }
 
   @ApiOperation({ summary: "get all customers ==> admin route" })
+  @AuthGuards()
   @PermissionsDec(PermissionEnum.ADMINS, PermissionEnum.CUSTOMERS)
   @Get("customers")
   customers(@Query() queryDto: SearchCustomersDto) {
@@ -108,6 +121,7 @@ export class UsersController {
   }
 
   @ApiOperation({ summary: "get all customers ==> admin route" })
+  @AuthGuards()
   @PermissionsDec(PermissionEnum.ADMINS, PermissionEnum.CUSTOMERS)
   @Get("customers/:id")
   customer(@Param() paramDto: ParamDto) {
@@ -115,6 +129,7 @@ export class UsersController {
   }
 
   @ApiOperation({ summary: "get all admins ==> admin route" })
+  @AuthGuards()
   @PermissionsDec(PermissionEnum.ADMINS, PermissionEnum.CUSTOMERS)
   @Get("admins")
   getAdmins(@Query() queryDto: SearchAdminQueryDto) {
@@ -122,6 +137,7 @@ export class UsersController {
   }
 
   @ApiOperation({ summary: "create admin ==> admin route" })
+  @AuthGuards()
   @PermissionsDec(PermissionEnum.ADMINS, PermissionEnum.CUSTOMERS)
   @Post("admins")
   createAdmin(@Body() createDto: CreateAdminDto) {
@@ -129,6 +145,7 @@ export class UsersController {
   }
 
   @ApiOperation({ summary: "get all permissions ==> admin route" })
+  @AuthGuards()
   @PermissionsDec(PermissionEnum.ADMINS, PermissionEnum.CUSTOMERS)
   @Get("permissions")
   getPermissions() {
@@ -136,6 +153,7 @@ export class UsersController {
   }
 
   @ApiOperation({ summary: "get all roles ==> admin route" })
+  @AuthGuards()
   @PermissionsDec(PermissionEnum.ADMINS, PermissionEnum.CUSTOMERS)
   @Get("roles")
   getRoles(@Query() queryDto: SearchRolesQueryDto) {
@@ -143,12 +161,16 @@ export class UsersController {
   }
 
   @ApiOperation({ summary: "create role ==> admin route" })
+  @AuthGuards()
   @PermissionsDec(PermissionEnum.ADMINS, PermissionEnum.CUSTOMERS)
   @Post("roles")
   createRole(@Body() createDto: CreateRoleDto) {
     return this.usersService.createRole(createDto);
   }
+
+  //
   @ApiOperation({ summary: "Create real user data" })
+  @AuthGuards()
   @HttpCode(HttpStatus.CREATED)
   @Post("real-user")
   createRealUser(@Body() createDto: CreateRealUserDto, @UserDec("id") userId: string) {
@@ -156,6 +178,7 @@ export class UsersController {
   }
 
   @ApiOperation({ summary: "Create legal user data" })
+  @AuthGuards()
   @HttpCode(HttpStatus.CREATED)
   @Post("legal-user")
   createLegalUser(@Body() createDto: CreateLegalUserDto, @UserDec("id") userId: string) {
@@ -163,6 +186,7 @@ export class UsersController {
   }
 
   @ApiOperation({ summary: "Create customer" })
+  @AuthGuards()
   @HttpCode(HttpStatus.CREATED)
   @Post("customer")
   createCustomer(@Body() createDto: CreateCustomerDto) {