diff --git a/src/main/java/back/activitymanager/config/SecurityConfig.java b/src/main/java/back/activitymanager/config/SecurityConfig.java
index fb2c419..c4d4204 100644
--- a/src/main/java/back/activitymanager/config/SecurityConfig.java
+++ b/src/main/java/back/activitymanager/config/SecurityConfig.java
@@ -40,7 +40,8 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Excepti
                 .cors(Customizer.withDefaults())
                 .csrf(AbstractHttpConfigurer::disable)
                 .authorizeHttpRequests(
-                        auth -> auth.requestMatchers("/auth/**", "/error",
+                        auth -> auth
+                                .requestMatchers("/auth/**", "/error", "/activity",
                                 "/swagger-ui/**",
                                 "/v3/api-docs/**",
                                 "/swagger-resources/**")
diff --git a/src/main/java/back/activitymanager/controller/ActivityController.java b/src/main/java/back/activitymanager/controller/ActivityController.java
index a9743be..75c6c1b 100644
--- a/src/main/java/back/activitymanager/controller/ActivityController.java
+++ b/src/main/java/back/activitymanager/controller/ActivityController.java
@@ -45,7 +45,6 @@ public ActivityDto createActivity(
 
     @Operation(summary = "Get all activities")
     @PostMapping
-    @PreAuthorize("hasRole('USER')")
     public Page<ActivityDto> getAll(Pageable pageable) {
         return activityService.getAll(pageable);
     }