diff --git a/API/Controllers/AccountController.cs b/API/Controllers/AccountController.cs
index 3c9960402..1ae406b8a 100644
--- a/API/Controllers/AccountController.cs
+++ b/API/Controllers/AccountController.cs
@@ -13,6 +13,7 @@ using API.Interfaces.Services;
using API.Services;
using AutoMapper;
using Kavita.Common;
+using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Identity;
using Microsoft.AspNetCore.Mvc;
using Microsoft.EntityFrameworkCore;
@@ -78,6 +79,7 @@ namespace API.Controllers
///
///
///
+ [Authorize(Policy = "RequireAdminRole")]
[HttpPost("register")]
public async Task> Register(RegisterDto registerDto)
{
diff --git a/UI/Web/src/app/admin/admin-routing.module.ts b/UI/Web/src/app/admin/admin-routing.module.ts
index a29927171..ad55b01d4 100644
--- a/UI/Web/src/app/admin/admin-routing.module.ts
+++ b/UI/Web/src/app/admin/admin-routing.module.ts
@@ -4,7 +4,7 @@ import { AdminGuard } from '../_guards/admin.guard';
import { DashboardComponent } from './dashboard/dashboard.component';
const routes: Routes = [
- {path: '**', component: DashboardComponent, pathMatch: 'full'},
+ {path: '**', component: DashboardComponent, pathMatch: 'full', canActivate: [AdminGuard]},
{
runGuardsAndResolvers: 'always',
canActivate: [AdminGuard],