diff --git a/.idea/.idea.ApiEfCoreLibrary/.idea/dataSources.xml b/.idea/.idea.ApiEfCoreLibrary/.idea/dataSources.xml
index 7c01f52..d839adb 100644
--- a/.idea/.idea.ApiEfCoreLibrary/.idea/dataSources.xml
+++ b/.idea/.idea.ApiEfCoreLibrary/.idea/dataSources.xml
@@ -6,6 +6,11 @@
       <synchronize>true</synchronize>
       <jdbc-driver>com.jetbrains.jdbc.sqlserver.SqlServerDriver</jdbc-driver>
       <jdbc-url>Server=romaric-thibault.fr,1433</jdbc-url>
+      <jdbc-additional-properties>
+        <property name="com.intellij.clouds.kubernetes.db.host.port" />
+        <property name="com.intellij.clouds.kubernetes.db.enabled" value="false" />
+        <property name="com.intellij.clouds.kubernetes.db.container.port" />
+      </jdbc-additional-properties>
       <working-dir>$ProjectFileDir$</working-dir>
     </data-source>
   </component>
diff --git a/ApiEfCoreLibrary/Endpoints/Author/CreateAuthorEndpoint.cs b/ApiEfCoreLibrary/Endpoints/Author/CreateAuthorEndpoint.cs
index c166284..0269eef 100644
--- a/ApiEfCoreLibrary/Endpoints/Author/CreateAuthorEndpoint.cs
+++ b/ApiEfCoreLibrary/Endpoints/Author/CreateAuthorEndpoint.cs
@@ -9,6 +9,7 @@ public class CreateAuthorEndpoint(LibraryDbContext database) : Endpoint<CreateAu
     public override void Configure()
     {
         Post("/api/authors");
+        Roles("admin");
     }
 
     public override async Task HandleAsync(CreateAuthorDto req, CancellationToken ct)
diff --git a/ApiEfCoreLibrary/Endpoints/Author/DeleteAuthorEndpoint.cs b/ApiEfCoreLibrary/Endpoints/Author/DeleteAuthorEndpoint.cs
index 75420fd..1b1bb51 100644
--- a/ApiEfCoreLibrary/Endpoints/Author/DeleteAuthorEndpoint.cs
+++ b/ApiEfCoreLibrary/Endpoints/Author/DeleteAuthorEndpoint.cs
@@ -15,6 +15,7 @@ public class DeleteAuthorEndpoint(LibraryDbContext database) : Endpoint<DeleteAu
     public override void Configure()
     {
         Delete("/api/authors/{@Id}", x => new {x.Id});
+        Roles("admin");
     }
 
     public override async Task HandleAsync(DeleteAuthorRequest req, CancellationToken ct)
diff --git a/ApiEfCoreLibrary/Endpoints/Author/GetAllAuthorsEndpoint.cs b/ApiEfCoreLibrary/Endpoints/Author/GetAllAuthorsEndpoint.cs
index dc43397..abd0710 100644
--- a/ApiEfCoreLibrary/Endpoints/Author/GetAllAuthorsEndpoint.cs
+++ b/ApiEfCoreLibrary/Endpoints/Author/GetAllAuthorsEndpoint.cs
@@ -10,6 +10,7 @@ public class GetAllAuthorsEndpoint(LibraryDbContext database) : EndpointWithoutR
     public override void Configure()
     {
         Get("/api/authors");
+        Roles("viewer", "admin", "librarian");
     }
 
     public override async Task HandleAsync(CancellationToken ct)
diff --git a/ApiEfCoreLibrary/Endpoints/Author/GetAuthorEndpoint.cs b/ApiEfCoreLibrary/Endpoints/Author/GetAuthorEndpoint.cs
index a8c1fdb..478941d 100644
--- a/ApiEfCoreLibrary/Endpoints/Author/GetAuthorEndpoint.cs
+++ b/ApiEfCoreLibrary/Endpoints/Author/GetAuthorEndpoint.cs
@@ -16,6 +16,7 @@ public class GetAuthorEndpoint(LibraryDbContext database) : Endpoint<GetAuthorRe
     public override void Configure()
     {
         Get("/api/authors/{@Id}", x => new {x.Id});
+        Roles("viewer", "admin", "librarian");
     }
 
     public override async Task HandleAsync(GetAuthorRequest req, CancellationToken ct)
diff --git a/ApiEfCoreLibrary/Endpoints/Author/UpdateAuthorEndpoint.cs b/ApiEfCoreLibrary/Endpoints/Author/UpdateAuthorEndpoint.cs
index 874a8b1..e6f5308 100644
--- a/ApiEfCoreLibrary/Endpoints/Author/UpdateAuthorEndpoint.cs
+++ b/ApiEfCoreLibrary/Endpoints/Author/UpdateAuthorEndpoint.cs
@@ -11,6 +11,7 @@ public class UpdateAuthorEndpoint(LibraryDbContext database) : Endpoint<UpdateAu
     public override void Configure()
     {
         Put("/api/authors/{@Id}", x => new {x.Id});
+        Roles("admin");
     }
 
     public override async Task HandleAsync(UpdateAuthorDto req, CancellationToken ct)
diff --git a/ApiEfCoreLibrary/Endpoints/Book/CreateBookEndpoint.cs b/ApiEfCoreLibrary/Endpoints/Book/CreateBookEndpoint.cs
index ba64859..94b19b1 100644
--- a/ApiEfCoreLibrary/Endpoints/Book/CreateBookEndpoint.cs
+++ b/ApiEfCoreLibrary/Endpoints/Book/CreateBookEndpoint.cs
@@ -9,7 +9,8 @@ public class CreateBookEndpoint(LibraryDbContext database) : Endpoint<CreateBook
 {
     public override void Configure()
     {
-        Post("/api/books");        AllowAnonymous();
+        Post("/api/books");       
+        Roles("admin");
     }
 
     public override async Task HandleAsync(CreateBookDto req, CancellationToken ct)
diff --git a/ApiEfCoreLibrary/Endpoints/Book/DeleteBookEndpoint.cs b/ApiEfCoreLibrary/Endpoints/Book/DeleteBookEndpoint.cs
index 25b6b6c..80cbd9c 100644
--- a/ApiEfCoreLibrary/Endpoints/Book/DeleteBookEndpoint.cs
+++ b/ApiEfCoreLibrary/Endpoints/Book/DeleteBookEndpoint.cs
@@ -16,6 +16,7 @@ public class DeleteBookEndpoint(LibraryDbContext database) : Endpoint<DeleteBook
     public override void Configure()
     {
         Delete("/api/books/{@Id}", x => new {x.Id});
+        Roles("admin");
     }
 
     public override async Task HandleAsync(DeleteBookRequest req, CancellationToken ct)
diff --git a/ApiEfCoreLibrary/Endpoints/Book/GetAllBooksEndpoint.cs b/ApiEfCoreLibrary/Endpoints/Book/GetAllBooksEndpoint.cs
index 5e10502..6f439ee 100644
--- a/ApiEfCoreLibrary/Endpoints/Book/GetAllBooksEndpoint.cs
+++ b/ApiEfCoreLibrary/Endpoints/Book/GetAllBooksEndpoint.cs
@@ -9,7 +9,7 @@ public class GetAllBooksEndpoint(LibraryDbContext database) : EndpointWithoutReq
     public override void Configure()
     {
         Get("/api/books");
-    }
+        Roles("viewer", "admin", "librarian");    }
 
     public override async Task HandleAsync(CancellationToken ct)
     {
diff --git a/ApiEfCoreLibrary/Endpoints/Book/GetBookEndpoint.cs b/ApiEfCoreLibrary/Endpoints/Book/GetBookEndpoint.cs
index 72d0ed4..888a159 100644
--- a/ApiEfCoreLibrary/Endpoints/Book/GetBookEndpoint.cs
+++ b/ApiEfCoreLibrary/Endpoints/Book/GetBookEndpoint.cs
@@ -14,7 +14,7 @@ public class GetBookEndpoint(LibraryDbContext database) : Endpoint<GetBookReques
     public override void Configure()
     {
         Get("/api/books/{@Id}", x => new {x.Id});
-    }
+        Roles("viewer", "admin", "librarian");    }
 
     public override async Task HandleAsync(GetBookRequest req, CancellationToken ct)
     {
diff --git a/ApiEfCoreLibrary/Endpoints/Book/UpdateBookEndpoint.cs b/ApiEfCoreLibrary/Endpoints/Book/UpdateBookEndpoint.cs
index ce61468..144a25f 100644
--- a/ApiEfCoreLibrary/Endpoints/Book/UpdateBookEndpoint.cs
+++ b/ApiEfCoreLibrary/Endpoints/Book/UpdateBookEndpoint.cs
@@ -10,6 +10,7 @@ public class UpdateBookEndpoint(LibraryDbContext database) : Endpoint<UpdateBook
     public override void Configure()
     {
         Put("/api/books/{@Id}", x => new {x.Id});
+        Roles("admin");
     }
 
     public override async Task HandleAsync(UpdateBookDto req, CancellationToken ct)
diff --git a/ApiEfCoreLibrary/Endpoints/Loan/CreateLoanEndpoint.cs b/ApiEfCoreLibrary/Endpoints/Loan/CreateLoanEndpoint.cs
index be6ba28..2e57126 100644
--- a/ApiEfCoreLibrary/Endpoints/Loan/CreateLoanEndpoint.cs
+++ b/ApiEfCoreLibrary/Endpoints/Loan/CreateLoanEndpoint.cs
@@ -10,6 +10,7 @@ public class CreateLoanEndpoint(LibraryDbContext database) : Endpoint<CreateLoan
     public override void Configure()
     {
         Post("/api/loans");
+        Roles("admin", "librarian");
     }
 
     public override async Task HandleAsync(CreateLoanDto req, CancellationToken ct)
diff --git a/ApiEfCoreLibrary/Endpoints/Loan/DeleteLoanEndpoint.cs b/ApiEfCoreLibrary/Endpoints/Loan/DeleteLoanEndpoint.cs
index a2e23f3..d29c05b 100644
--- a/ApiEfCoreLibrary/Endpoints/Loan/DeleteLoanEndpoint.cs
+++ b/ApiEfCoreLibrary/Endpoints/Loan/DeleteLoanEndpoint.cs
@@ -16,6 +16,7 @@ public class DeleteLoanEndpoint(LibraryDbContext database) : Endpoint<DeleteLoan
     public override void Configure()
     {
         Delete("/api/loans/{@Id}", x => new {x.Id});
+        Roles("admin");
     }
 
     public override async Task HandleAsync(DeleteLoanRequest req, CancellationToken ct)
diff --git a/ApiEfCoreLibrary/Endpoints/Loan/GetAllLoansEndpoint.cs b/ApiEfCoreLibrary/Endpoints/Loan/GetAllLoansEndpoint.cs
index e145d7a..e942f98 100644
--- a/ApiEfCoreLibrary/Endpoints/Loan/GetAllLoansEndpoint.cs
+++ b/ApiEfCoreLibrary/Endpoints/Loan/GetAllLoansEndpoint.cs
@@ -9,7 +9,7 @@ public class GetAllLoanEndpoint(LibraryDbContext database) : EndpointWithoutRequ
     public override void Configure()
     {
         Get("/api/loans");
-    }
+        Roles("viewer", "admin", "librarian");    }
 
     public override async Task HandleAsync(CancellationToken ct)
     {
diff --git a/ApiEfCoreLibrary/Endpoints/Loan/GetLoanEndpoint.cs b/ApiEfCoreLibrary/Endpoints/Loan/GetLoanEndpoint.cs
index a05f903..10c92af 100644
--- a/ApiEfCoreLibrary/Endpoints/Loan/GetLoanEndpoint.cs
+++ b/ApiEfCoreLibrary/Endpoints/Loan/GetLoanEndpoint.cs
@@ -14,7 +14,7 @@ public class GetLoanEndpoint(LibraryDbContext database) : Endpoint<GetLoanReques
     public override void Configure()
     {
         Get("/api/loans/{@Id}", x => new {x.Id});
-    }
+        Roles("viewer", "admin", "librarian");    }
 
     public override async Task HandleAsync(GetLoanRequest req, CancellationToken ct)
     {
diff --git a/ApiEfCoreLibrary/Endpoints/Loan/PatchLoanEndpoint.cs b/ApiEfCoreLibrary/Endpoints/Loan/PatchLoanEndpoint.cs
index ed7f30c..018ea2d 100644
--- a/ApiEfCoreLibrary/Endpoints/Loan/PatchLoanEndpoint.cs
+++ b/ApiEfCoreLibrary/Endpoints/Loan/PatchLoanEndpoint.cs
@@ -10,6 +10,7 @@ public class PatchLoanEndpoint(LibraryDbContext database) : Endpoint<PatchLoanDt
     public override void Configure()
     {
         Patch("/api/loans/{@Id}/EffectiveReturningDate", x => new {x.Id});
+        Roles("admin", "librarian");
     }
 
     public override async Task HandleAsync(PatchLoanDto req, CancellationToken ct)
diff --git a/ApiEfCoreLibrary/Endpoints/Loan/UpdateLoanEndpoint.cs b/ApiEfCoreLibrary/Endpoints/Loan/UpdateLoanEndpoint.cs
index 57f30c2..5e49ead 100644
--- a/ApiEfCoreLibrary/Endpoints/Loan/UpdateLoanEndpoint.cs
+++ b/ApiEfCoreLibrary/Endpoints/Loan/UpdateLoanEndpoint.cs
@@ -10,6 +10,7 @@ public class UpdateLoanEndpoint(LibraryDbContext database) : Endpoint<UpdateLoan
     public override void Configure()
     {
         Put("/api/loans/{@Id}", x => new {x.Id});
+        Roles("admin", "librarian");
     }
 
     public override async Task HandleAsync(UpdateLoanDto req, CancellationToken ct)
diff --git a/ApiEfCoreLibrary/Endpoints/Login/UserLoginEndpoint.cs b/ApiEfCoreLibrary/Endpoints/Login/UserLoginEndpoint.cs
index 3b37f3c..e743d70 100644
--- a/ApiEfCoreLibrary/Endpoints/Login/UserLoginEndpoint.cs
+++ b/ApiEfCoreLibrary/Endpoints/Login/UserLoginEndpoint.cs
@@ -31,7 +31,7 @@ public class UserLoginEndpoint(LibraryDbContext database) : Endpoint<ConnectLogi
                 {
                     o.SigningKey = "ThisIsASuperSecretJwtKeyThatIsAtLeast32CharsLong";
                     o.ExpireAt = DateTime.UtcNow.AddMinutes(15);
-                    // o.User.Roles.Add("User", "Admin");
+                    if (login.Role != null) o.User.Roles.Add(login.Role);
                     o.User.Claims.Add(("Username", login.Username)!);
                     o.User.Claims.Add(("FullName", login.FullName)!);
                     o.User["UserId"] = "001";
diff --git a/ApiEfCoreLibrary/Endpoints/User/CreateUserEndpoint.cs b/ApiEfCoreLibrary/Endpoints/User/CreateUserEndpoint.cs
index fca4a8a..e032066 100644
--- a/ApiEfCoreLibrary/Endpoints/User/CreateUserEndpoint.cs
+++ b/ApiEfCoreLibrary/Endpoints/User/CreateUserEndpoint.cs
@@ -9,6 +9,7 @@ public class CreateUserEndpoint(LibraryDbContext database) : Endpoint<CreateUser
     public override void Configure()
     {
         Post("/api/users");
+        Roles("admin");
     }
 
     public override async Task HandleAsync(CreateUserDto req, CancellationToken ct)
diff --git a/ApiEfCoreLibrary/Endpoints/User/DeleteUserEndpoint.cs b/ApiEfCoreLibrary/Endpoints/User/DeleteUserEndpoint.cs
index 242b2ab..ee7a42f 100644
--- a/ApiEfCoreLibrary/Endpoints/User/DeleteUserEndpoint.cs
+++ b/ApiEfCoreLibrary/Endpoints/User/DeleteUserEndpoint.cs
@@ -15,6 +15,7 @@ public class DeleteUserEndpoint(LibraryDbContext database) : Endpoint<DeleteUser
     public override void Configure()
     {
         Delete("/api/users/{@Id}", x => new {x.Id});
+        Roles("admin");
     }
 
     public override async Task HandleAsync(DeleteUserRequest req, CancellationToken ct)
diff --git a/ApiEfCoreLibrary/Endpoints/User/GetAllUsersEndpoint.cs b/ApiEfCoreLibrary/Endpoints/User/GetAllUsersEndpoint.cs
index 6fe0d38..c8a4c8f 100644
--- a/ApiEfCoreLibrary/Endpoints/User/GetAllUsersEndpoint.cs
+++ b/ApiEfCoreLibrary/Endpoints/User/GetAllUsersEndpoint.cs
@@ -10,7 +10,7 @@ public class GetAllUsersEndpoint(LibraryDbContext database) : EndpointWithoutReq
     public override void Configure()
     {
         Get("/api/users");
-    }
+        Roles("viewer", "admin", "librarian");    }
 
     public override async Task HandleAsync(CancellationToken ct)
     {
diff --git a/ApiEfCoreLibrary/Endpoints/User/GetUserEndpoint.cs b/ApiEfCoreLibrary/Endpoints/User/GetUserEndpoint.cs
index 92d6552..09815dc 100644
--- a/ApiEfCoreLibrary/Endpoints/User/GetUserEndpoint.cs
+++ b/ApiEfCoreLibrary/Endpoints/User/GetUserEndpoint.cs
@@ -16,7 +16,7 @@ public class GetUserEndpoint(LibraryDbContext database) : Endpoint<GetUserReques
     public override void Configure()
     {
         Get("/api/users/{@Id}", x => new {x.Id});
-    }
+        Roles("viewer", "admin", "librarian");    }
 
     public override async Task HandleAsync(GetUserRequest req, CancellationToken ct)
     {
diff --git a/ApiEfCoreLibrary/Endpoints/User/UpdateUserEndpoint.cs b/ApiEfCoreLibrary/Endpoints/User/UpdateUserEndpoint.cs
index 7ab18ea..27acb5d 100644
--- a/ApiEfCoreLibrary/Endpoints/User/UpdateUserEndpoint.cs
+++ b/ApiEfCoreLibrary/Endpoints/User/UpdateUserEndpoint.cs
@@ -10,6 +10,7 @@ public class UpdateUserEndpoint(LibraryDbContext database) : Endpoint<UpdateUser
     public override void Configure()
     {
         Put("/api/users/{@Id}", x => new {x.Id});
+        Roles("admin");
     }
 
     public override async Task HandleAsync(UpdateUserDto req, CancellationToken ct)