diff --git a/scripts/init_rbac.py b/scripts/init_rbac.py
index e5bd6be..5560f43 100644
--- a/scripts/init_rbac.py
+++ b/scripts/init_rbac.py
@@ -18,8 +18,13 @@ PUBLIC = ['/api/status', '/api/engines', '/api/kb/list', '/', '/index.ui', '/top
           '/rbac/user/login.dspy', '/rbac/user/register.dspy', '/rbac/user/logout.dspy',
           '/rbac/**']
 LOGINED = ['/api/search', '/api/doc/upload', '/api/doc/delete',
+           '/api/dir/create', '/api/dir/delete', '/api/dir/list',
+           '/api/tag/create', '/api/tag/list', '/api/tag/delete',
+           '/api/tag/assign', '/api/tag/unassign', '/api/tag/media_tags',
+           '/api/tag/search',
            '/knowledge_bases_list/', '/documents_list/',
-           '/engine_configs_list/', '/subscriptions_list/']
+           '/engine_configs_list/', '/subscriptions_list/',
+           '/tags_list/', '/tag_assign/', '/tag_search/']
 
 
 async def main():