diff --git a/backend/src/middleware/permissionsMiddleware.js b/backend/src/middleware/permissionsMiddleware.js
index 077c4a2a4..1f0ffd79a 100644
--- a/backend/src/middleware/permissionsMiddleware.js
+++ b/backend/src/middleware/permissionsMiddleware.js
@@ -98,6 +98,10 @@ const permissions = shield(
   {
     Query: {
       '*': deny,
+      findPosts: allow,
+      Category: isAdmin,
+      Tag: isAdmin,
+      Report: isModerator,
       Notification: isAdmin,
       statistics: allow,
       currentUser: allow,