diff --git a/internal/modules/finance/payments/route.go b/internal/modules/finance/payments/route.go
index b00de964..c2931f0a 100644
--- a/internal/modules/finance/payments/route.go
+++ b/internal/modules/finance/payments/route.go
@@ -13,9 +13,9 @@ func PaymentRoutes(v1 fiber.Router, u user.UserService, s payment.PaymentService
 	ctrl := controller.NewPaymentController(s)
 
 	route := v1.Group("/payments")
-	// route.Use(m.Auth(u))
+	route.Use(m.Auth(u))
 
-	route.Post("/", ctrl.CreateOne)
+	route.Post("/", m.RequirePermissions(m.P_Finances_Payments_CreateOne), ctrl.CreateOne)
 	route.Get("/:id", m.RequirePermissions(m.P_Finances_Payments_GetOne), ctrl.GetOne)
 	route.Patch("/:id", m.RequirePermissions(m.P_Finances_Payments_UpdateOne), ctrl.UpdateOne)
 }