diff --git a/API/Controllers/AccountController.cs b/API/Controllers/AccountController.cs
index 4dd7d5318..01eb52412 100644
--- a/API/Controllers/AccountController.cs
+++ b/API/Controllers/AccountController.cs
@@ -12,6 +12,7 @@ using API.Extensions;
using API.Services;
using AutoMapper;
using Kavita.Common;
+using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Identity;
using Microsoft.AspNetCore.Mvc;
using Microsoft.EntityFrameworkCore;
@@ -77,6 +78,7 @@ namespace API.Controllers
///
///
///
+ [Authorize(Policy = "RequireAdminRole")]
[HttpPost("register")]
public async Task> Register(RegisterDto registerDto)
{
diff --git a/UI/Web/src/app/admin/admin-routing.module.ts b/UI/Web/src/app/admin/admin-routing.module.ts
index a29927171..ad55b01d4 100644
--- a/UI/Web/src/app/admin/admin-routing.module.ts
+++ b/UI/Web/src/app/admin/admin-routing.module.ts
@@ -4,7 +4,7 @@ import { AdminGuard } from '../_guards/admin.guard';
import { DashboardComponent } from './dashboard/dashboard.component';
const routes: Routes = [
- {path: '**', component: DashboardComponent, pathMatch: 'full'},
+ {path: '**', component: DashboardComponent, pathMatch: 'full', canActivate: [AdminGuard]},
{
runGuardsAndResolvers: 'always',
canActivate: [AdminGuard],