diff --git a/crm/rest/router.go b/crm/rest/router.go
index c89ff8c62..4881f7528 100644
--- a/crm/rest/router.go
+++ b/crm/rest/router.go
@@ -9,7 +9,6 @@ import (
 
 func MountRoutes() func(chi.Router) {
 	var (
-		permissions  = Permissions{}.New()
 		module       = Module{}.New()
 		record       = Record{}.New()
 		page         = Page{}.New()
@@ -23,12 +22,16 @@ func MountRoutes() func(chi.Router) {
 
 	// Initialize handlers & controllers.
 	return func(r chi.Router) {
+
+		r.Group(func(r chi.Router) {
+			handlers.NewPermissions(Permissions{}.New()).MountRoutes(r)
+		})
+
 		// Protect all _private_ routes
 		r.Group(func(r chi.Router) {
 			r.Use(auth.MiddlewareValidOnly)
 			r.Use(middlewareAllowedAccess)
 
-			handlers.NewPermissions(permissions).MountRoutes(r)
 			handlers.NewPage(page).MountRoutes(r)
 			handlers.NewModule(module).MountRoutes(r)
 			handlers.NewRecord(record).MountRoutes(r)
diff --git a/messaging/rest/router.go b/messaging/rest/router.go
index 664dfb88d..84657851b 100644
--- a/messaging/rest/router.go
+++ b/messaging/rest/router.go
@@ -15,12 +15,15 @@ func MountRoutes() func(chi.Router) {
 			handlers.NewAttachmentDownloadable(Attachment{}.New()).MountRoutes(r)
 		})
 
+		r.Group(func(r chi.Router) {
+			handlers.NewPermissions(Permissions{}.New()).MountRoutes(r)
+		})
+
 		// Protect all _private_ routes
 		r.Group(func(r chi.Router) {
 			r.Use(auth.MiddlewareValidOnly)
 			r.Use(middlewareAllowedAccess)
 
-			handlers.NewPermissions(Permissions{}.New()).MountRoutes(r)
 			handlers.NewChannel(Channel{}.New()).MountRoutes(r)
 			handlers.NewMessage(Message{}.New()).MountRoutes(r)
 			handlers.NewSearch(Search{}.New()).MountRoutes(r)