1 files changed, 12 insertions, 0 deletions
diff --git a/src/main/resources/script/access.js b/src/main/resources/script/access.js
index b1782c7..5cd00b9 100755
--- a/src/main/resources/script/access.js
+++ b/src/main/resources/script/access.js
@@ -82,6 +82,18 @@ var httpAccessConfig =
            "methods"    : "action,read",
            "actions"    : "getToken"
         },
+        {
+           "pattern"    : "endpoint/favorites",
+           "roles"      : "openidm-authorized",
+           "methods"    : "query",
+           "actions"    : "*"
+        },
+        {
+           "pattern"    : "endpoint/favorites/*",
+           "roles"      : "openidm-authorized",
+           "methods"    : "update",
+           "actions"    : "*"
+        },
         // openidm-admin can request nearly anything (some exceptions being a few system endpoints)
         {
             "pattern"   : "*",