diff --git a/internal/middleware/permissions.go b/internal/middleware/permissions.go
index e715aae9..9e2b5e5e 100644
--- a/internal/middleware/permissions.go
+++ b/internal/middleware/permissions.go
@@ -73,10 +73,19 @@ const (
 	P_TransferCreateOne = "lti.inventory.transfer.create"
 )
 
+const (
+	P_TransferToLaying_GetAll   = "lti.production.transfer_to_laying.list"
+	P_TransferToLaying_GetOne   = "lti.production.transfer_to_laying.detail"
+	P_TransferToLaying_CreateOne   = "lti.production.transfer_to_laying.create"
+	P_TransferToLaying_UpdateOne   = "lti.production.transfer_to_laying.update"
+	P_TransferToLaying_DeleteOne   = "lti.production.transfer_to_laying.delete"
+	P_TransferToLaying_Approval   = "lti.production.transfer_to_laying.approve"
+	P_TransferToLaying_GetAvailableQty   = "lti.production.transfer_to_laying.getavailableqty"
+)
+
 const (
 	P_DeliveryGetAll      = "lti.marketing.delivery_order.list"
 	P_DeliveryGetOne      = "lti.marketing.delivery_order.detail"
-	P_DeliveryCreateOne   = "lti.marketing.delivery_order.create"
 	P_DeliveryUpdateOne   = "lti.marketing.delivery_order.update"
 	P_SalesOrderDelete    = "lti.marketing.sales_order.delete"
 	P_SalesOrderApproval  = "lti.marketing.sales_order.approve"
diff --git a/internal/modules/marketing/route.go b/internal/modules/marketing/route.go
index 75ecc0f6..139d1ee9 100644
--- a/internal/modules/marketing/route.go
+++ b/internal/modules/marketing/route.go
@@ -16,16 +16,12 @@ func RegisterRoutes(router fiber.Router, userService user.UserService, salesOrde
 	route := router.Group("/marketing")
 	route.Use(m.Auth(userService))
 
-	route.Get("/", deliveryOrdersCtrl.GetAll)
-	route.Get("/:id", deliveryOrdersCtrl.GetOne)
-	route.Delete("/:id", salesOrdersCtrl.DeleteOne)
+	route.Get("/",m.RequirePermissions(m.P_DeliveryGetAll), deliveryOrdersCtrl.GetAll)
+	route.Get("/:id",m.RequirePermissions(m.P_DeliveryGetOne), deliveryOrdersCtrl.GetOne)
+	route.Delete("/:id",m.RequirePermissions(m.P_SalesOrderDelete), salesOrdersCtrl.DeleteOne)
 
-	route.Post("/sales-orders", salesOrdersCtrl.CreateOne)
-	route.Patch("/sales-orders/:id", salesOrdersCtrl.UpdateOne)
-	route.Post("/sales-orders/approvals", salesOrdersCtrl.Approval)
+	route.Post("/sales-orders",m.RequirePermissions(m.P_SalesOrderCreateOne), salesOrdersCtrl.CreateOne)
+	route.Patch("/sales-orders/:id",m.RequirePermissions(m.P_SalesOrderUpdateOne), salesOrdersCtrl.UpdateOne)
+	route.Post("/sales-orders/approvals",m.RequirePermissions(m.P_SalesOrderApproval), salesOrdersCtrl.Approval)
 
-	route.Get("/delivery-orders", deliveryOrdersCtrl.GetAll)
-	route.Get("/delivery-orders/:id", deliveryOrdersCtrl.GetOne)
-	route.Post("/delivery-orders", deliveryOrdersCtrl.CreateOne)
-	route.Patch("/delivery-orders/:id", deliveryOrdersCtrl.UpdateOne)
 }
diff --git a/internal/modules/production/transfer_layings/route.go b/internal/modules/production/transfer_layings/route.go
index 868454c5..8f7a62c0 100644
--- a/internal/modules/production/transfer_layings/route.go
+++ b/internal/modules/production/transfer_layings/route.go
@@ -21,11 +21,11 @@ func TransferLayingRoutes(v1 fiber.Router, u user.UserService, s transferLaying.
 	// route.Delete("/:id", m.Auth(u), ctrl.DeleteOne)
 	// route.Post("/approval", m.Auth(u), ctrl.Approval)
 
-	route.Get("/", ctrl.GetAll)
-	route.Post("/", ctrl.CreateOne)
-	route.Get("/:id", ctrl.GetOne)
-	route.Patch("/:id", ctrl.UpdateOne)
-	route.Delete("/:id", ctrl.DeleteOne)
-	route.Post("/approvals", ctrl.Approval)
-	route.Get("/project-flocks/:project_flock_id/available-qty", ctrl.GetAvailableQtyPerKandang)
+	route.Get("/",m.RequirePermissions(m.P_TransferToLaying_GetAll), ctrl.GetAll)
+	route.Post("/",m.RequirePermissions(m.P_TransferToLaying_CreateOne), ctrl.CreateOne)
+	route.Get("/:id",m.RequirePermissions(m.P_TransferToLaying_GetOne), ctrl.GetOne)
+	route.Patch("/:id",m.RequirePermissions(m.P_TransferToLaying_UpdateOne), ctrl.UpdateOne)
+	route.Delete("/:id",m.RequirePermissions(m.P_TransferToLaying_DeleteOne), ctrl.DeleteOne)
+	route.Post("/approvals",m.RequirePermissions(m.P_TransferToLaying_Approval), ctrl.Approval)
+	route.Get("/project-flocks/:project_flock_id/available-qty",m.RequirePermissions(m.P_TransferToLaying_GetAvailableQty), ctrl.GetAvailableQtyPerKandang)
 }