diff --git a/server/AyaNova/Controllers/AyaEnumPickListController.cs b/server/AyaNova/Controllers/AyaEnumPickListController.cs
index c0867ea6..53818944 100644
--- a/server/AyaNova/Controllers/AyaEnumPickListController.cs
+++ b/server/AyaNova/Controllers/AyaEnumPickListController.cs
@@ -3,6 +3,7 @@ using System.Collections.Generic;
 using Microsoft.AspNetCore.Mvc;
 using Microsoft.AspNetCore.Routing;
 using Microsoft.Extensions.Logging;
+using Microsoft.AspNetCore.Authorization;
 using AyaNova.Models;
 using AyaNova.Api.ControllerHelpers;
 using AyaNova.Biz;
@@ -17,6 +18,7 @@ namespace AyaNova.Api.Controllers
     [ApiVersion("8.0")]
     [Route("api/v{version:apiVersion}/[controller]")]
     [Produces("application/json")]
+      [Authorize]
     public class AyaEnumPickListController : Controller
     {
         private readonly AyContext ct;
diff --git a/server/AyaNova/Controllers/AyaTypeController.cs b/server/AyaNova/Controllers/AyaTypeController.cs
index 60594843..7923a8ec 100644
--- a/server/AyaNova/Controllers/AyaTypeController.cs
+++ b/server/AyaNova/Controllers/AyaTypeController.cs
@@ -3,6 +3,7 @@ using System.Collections.Generic;
 using Microsoft.AspNetCore.Mvc;
 using Microsoft.AspNetCore.Routing;
 using Microsoft.Extensions.Logging;
+using Microsoft.AspNetCore.Authorization;
 using AyaNova.Models;
 using AyaNova.Api.ControllerHelpers;
 using AyaNova.Biz;
@@ -17,6 +18,7 @@ namespace AyaNova.Api.Controllers
     [ApiVersion("8.0")]
     [Route("api/v{version:apiVersion}/[controller]")]
     [Produces("application/json")]
+    [Authorize]
     public class AyaTypeController : Controller
     {
         private readonly AyContext ct;
diff --git a/server/AyaNova/Controllers/TagPickListController.cs b/server/AyaNova/Controllers/TagPickListController.cs
index 928f033c..d5db49c5 100644
--- a/server/AyaNova/Controllers/TagPickListController.cs
+++ b/server/AyaNova/Controllers/TagPickListController.cs
@@ -3,6 +3,7 @@ using System.Collections.Generic;
 using Microsoft.AspNetCore.Mvc;
 using Microsoft.AspNetCore.Routing;
 using Microsoft.Extensions.Logging;
+using Microsoft.AspNetCore.Authorization;
 using AyaNova.Models;
 using AyaNova.Api.ControllerHelpers;
 using AyaNova.Biz;
@@ -17,6 +18,7 @@ namespace AyaNova.Api.Controllers
     [ApiVersion("8.0")]
     [Route("api/v{version:apiVersion}/[controller]")]
     [Produces("application/json")]
+    [Authorize]
     public class TagPickListController : Controller
     {
         private readonly AyContext ct;
@@ -53,7 +55,7 @@ namespace AyaNova.Api.Controllers
                 return StatusCode(503, new ApiErrorResponse(ApiErrorCode.API_CLOSED, null, serverState.Reason));
             }
 
-            return Ok(new ApiOkResponse(TagUtil.PickListFiltered(ct,query)));
+            return Ok(new ApiOkResponse(TagUtil.PickListFiltered(ct, query)));
         }