diff --git a/Marco.Pms.Services/Controllers/AttendanceController.cs b/Marco.Pms.Services/Controllers/AttendanceController.cs
index 93d6b22..3be9de8 100644
--- a/Marco.Pms.Services/Controllers/AttendanceController.cs
+++ b/Marco.Pms.Services/Controllers/AttendanceController.cs
@@ -8,6 +8,7 @@ using Marco.Pms.Model.Utilities;
 using Marco.Pms.Model.ViewModels.Attendance;
 using Marco.Pms.Services.Service;
 using MarcoBMS.Services.Helpers;
+using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
 using Microsoft.CodeAnalysis;
 using Microsoft.EntityFrameworkCore;
@@ -15,6 +16,7 @@ using Document = Marco.Pms.Model.DocumentManager.Document;
 
 namespace MarcoBMS.Services.Controllers
 {
+    [Authorize]
     [ApiController]
     [Route("api/[controller]")]
     public class AttendanceController : ControllerBase
@@ -515,7 +517,6 @@ namespace MarcoBMS.Services.Controllers
 
                 using var stream = new MemoryStream(fileBytes);
                 var objectKey = await _s3Service.UploadFileAsync(stream, Image.FileName, Image.ContentType);
-                //var objectKey = await _s3Service.UploadFileAsync(Image.FileName, Image.ContentType);
                 var preSignedUrl = await _s3Service.GeneratePreSignedUrlAsync(objectKey);
 
                 Document document = new Document