diff --git a/master.cfg b/master.cfg
index 78f36ed..2f41906 100644
--- a/master.cfg
+++ b/master.cfg
@@ -189,6 +189,9 @@ c["www"] = {
     },
     "change_hook_dialects": {},
     "auth": GiteaAuth(CLIENT_ID, CLIENT_SECRET),
+    "authz": util.Authz(
+        allowRules=[util.AnyControlEndpointMatcher(role="admins")], roleMatchers=[]
+    ),
 }
 if GITEA_SECRET:
     c["www"]["change_hook_dialects"]["gitea"] = {