diff --git a/src/controllers/01-branch-controller.ts b/src/controllers/01-branch-controller.ts
index 3cb5473..cb37822 100644
--- a/src/controllers/01-branch-controller.ts
+++ b/src/controllers/01-branch-controller.ts
@@ -797,6 +797,7 @@ export class BranchController extends Controller {
   }
 
   @Put("{branchId}/bank-qr/{bankId}")
+  @Security("keycloak", MANAGE_ROLES.concat("admin", "branch_manager"))
   async setBankQRByBranchIdAndBankId(
     @Request() req: RequestWithUser,
     @Path() branchId: string,