diff --git a/server/AyaNova/Controllers/ServerStateController.cs b/server/AyaNova/Controllers/ServerStateController.cs
index 0fb40429..ce9ba64c 100644
--- a/server/AyaNova/Controllers/ServerStateController.cs
+++ b/server/AyaNova/Controllers/ServerStateController.cs
@@ -20,6 +20,7 @@ namespace AyaNova.Api.Controllers
     [ApiVersion("8.0")]
     [Route("api/v{version:apiVersion}/server-state")]
     [Produces("application/json")]
+    [Authorize]
     public class ServerStateController : ControllerBase
     {
         private readonly AyContext ct;
@@ -47,6 +48,7 @@ namespace AyaNova.Api.Controllers
         [HttpGet]
         public ActionResult Get()
         {
+            //any logged in user can get the state
             return Ok(ApiOkResponse.Response(new ServerStateModel() { ServerState = serverState.GetState().ToString(), Reason = serverState.Reason }));
         }
 
@@ -59,7 +61,6 @@ namespace AyaNova.Api.Controllers
         /// <param name="state">{"serverState":"Open"}</param>
         /// <returns>NoContent 204</returns>
         [HttpPost]
-        [Authorize]
         public async Task<IActionResult> PostServerState([FromBody] ServerStateModel state)
         {
             if (serverState.IsClosed)//no state change allowed when closed