diff --git a/api/src/Controllers/ItemsController.cs b/api/src/Controllers/ItemsController.cs
index 79a3067..65cb0ad 100644
--- a/api/src/Controllers/ItemsController.cs
+++ b/api/src/Controllers/ItemsController.cs
@@ -15,13 +15,13 @@ public class ItemsController : ControllerBase {
         service_ = service;
     }
 
-    [AllowAnonymous] // accessible if not authorized
+    [[Authorize]]
     [HttpGet]
     public async Task<ActionResult<List<Item>>> getItems() {
         return Ok(await service_.GetAll());
     }
 
-    [AllowAnonymous]
+    [[Authorize]]
     [HttpGet("{id:int}")]
     public async Task<ActionResult<Item>> getItem(int id) {