diff --git a/internal/transport/server.go b/internal/transport/server.go
index 5f61406..028a8d3 100644
--- a/internal/transport/server.go
+++ b/internal/transport/server.go
@@ -44,16 +44,12 @@ func (s *Server) router() {
 
 func (s *Server) Start() {
 	s.gin.Use(ginzap.Ginzap(s.dependencies.Logger, time.RFC3339, false))
-	s.gin.Use(cors.New(cors.Config{
-		AllowOrigins:     []string{"*"},
-		AllowMethods:     []string{"PUT", "PATCH", "GET", "POST", "OPTIONS"},
-		AllowHeaders:     []string{"*", "x-session-token"},
-		ExposeHeaders:    []string{"Content-Length"},
-		AllowCredentials: true,
-		MaxAge:           24 * time.Hour,
-	}))
+	var AllowOrigins = []string{"http://google.com"}
+	corsConfig := cors.DefaultConfig()
+	corsConfig.AllowOrigins = AllowOrigins
+	s.gin.Use(cors.New(corsConfig))
 	s.gin.Use(middleware.MetricMiddleware())
-	//s.gin.Use(middleware.PermissionMiddleware(s.dependencies.Service.AuthService))
+	s.gin.Use(middleware.PermissionMiddleware(s.dependencies.Service.AuthService))
 	s.router()
 	metrics.AdminHandler()