diff --git a/Controllers/ExamReportController.cs b/Controllers/ExamReportController.cs
index d8bffcf..dea1ebd 100644
--- a/Controllers/ExamReportController.cs
+++ b/Controllers/ExamReportController.cs
@@ -299,6 +299,7 @@ namespace BMA.EHR.Report.Service.Controllers
 		}
 
 		[HttpGet("pass/{id:length(36)}")]
+		[AllowAnonymous]
 		[ProducesResponseType(StatusCodes.Status200OK)]
 		[ProducesResponseType(StatusCodes.Status400BadRequest)]
 		[ProducesResponseType(StatusCodes.Status401Unauthorized)]
diff --git a/Controllers/RecruitReportController.cs b/Controllers/RecruitReportController.cs
index d05e2f0..e64517d 100644
--- a/Controllers/RecruitReportController.cs
+++ b/Controllers/RecruitReportController.cs
@@ -216,6 +216,7 @@ namespace BMA.EHR.Report.Service.Controllers
 
 
 		[HttpGet("candidate/{id:length(36)}")]
+		[AllowAnonymous]
 		public async Task<ActionResult<ResponseObject>> GetCandidateListReportAsync(Guid id)
 		{
 			try
@@ -266,6 +267,7 @@ namespace BMA.EHR.Report.Service.Controllers
 		}
 
 		[HttpGet("pass/{id:length(36)}")]
+		[AllowAnonymous]
 		[ProducesResponseType(StatusCodes.Status200OK)]
 		[ProducesResponseType(StatusCodes.Status400BadRequest)]
 		[ProducesResponseType(StatusCodes.Status401Unauthorized)]