diff --git a/manager/router/router.go b/manager/router/router.go
index 30de995b0..c267b2f24 100644
--- a/manager/router/router.go
+++ b/manager/router/router.go
@@ -197,10 +197,10 @@ func Init(cfg *config.Config, logDir string, service service.Service, enforcer *
 
 	// Config
 	config := apiv1.Group("/configs")
-	config.POST("", h.CreateConfig)
-	config.DELETE(":id", h.DestroyConfig)
-	config.PATCH(":id", h.UpdateConfig)
-	config.GET(":id", h.GetConfig)
+	config.POST("", h.CreateConfig, jwt.MiddlewareFunc(), rbac)
+	config.DELETE(":id", h.DestroyConfig, jwt.MiddlewareFunc(), rbac)
+	config.PATCH(":id", h.UpdateConfig, jwt.MiddlewareFunc(), rbac)
+	config.GET(":id", h.GetConfig, jwt.MiddlewareFunc(), rbac)
 	config.GET("", h.GetConfigs)
 
 	// Job