diff --git a/src/modules/auth/auth.controller.ts b/src/modules/auth/auth.controller.ts
index 633df31..9514499 100755
--- a/src/modules/auth/auth.controller.ts
+++ b/src/modules/auth/auth.controller.ts
@@ -11,7 +11,7 @@ import { VerifyOtpDto } from "./DTO/verify-otp.dto";
 import { AuthService } from "./providers/auth.service";
 import { SSOService } from "./providers/sso.service";
 import { AuthGuards } from "../../common/decorators/auth-guard.decorator";
-import { RefreshTokenRateLimit, StrictRateLimit } from "../../common/decorators/rate-limit.decorator";
+import { RefreshTokenRateLimit } from "../../common/decorators/rate-limit.decorator";
 import { UserDec } from "../../common/decorators/user.decorator";
 import { User } from "../users/entities/user.entity";
 import { ForgetPasswordDto } from "./DTO/forget-password.dto";
@@ -19,7 +19,7 @@ import { VerifyForgotPasswordOtpDto } from "./DTO/verify-forgot-otp.dto";
 
 @ApiTags("Auth")
 @Controller("auth")
-@StrictRateLimit()
+// @StrictRateLimit()
 export class AuthController {
   constructor(
     private readonly authService: AuthService,
diff --git a/src/modules/auth/providers/tokens.service.ts b/src/modules/auth/providers/tokens.service.ts
index f20e9d0..77b8277 100755
--- a/src/modules/auth/providers/tokens.service.ts
+++ b/src/modules/auth/providers/tokens.service.ts
@@ -38,9 +38,9 @@ export class TokensService {
     return this.generateAccessAndRefreshToken(
       {
         id: user.id,
-        isAdmin: user.roles.some((r) => r.isAdmin),
+        isAdmin: false,
         isReseller: true,
-        permissions: user.roles.flatMap((r) => (r?.permissions?.length ? r.permissions.map((p) => p.name) : [])),
+        permissions: [],
       },
       queryRunner,
     );