diff --git a/Yavsc/ApiControllers/BookQueryApiController.cs b/Yavsc/ApiControllers/BookQueryApiController.cs
index dae6278c..de9cae3d 100644
--- a/Yavsc/ApiControllers/BookQueryApiController.cs
+++ b/Yavsc/ApiControllers/BookQueryApiController.cs
@@ -1,5 +1,6 @@
 using System.Collections.Generic;
 using System.Linq;
+using Microsoft.AspNet.Authorization;
 using Microsoft.AspNet.Http;
 using Microsoft.AspNet.Mvc;
 using Microsoft.Data.Entity;
@@ -9,7 +10,7 @@ using Yavsc.Models.Booking;
 namespace Yavsc.Controllers
 {
     [Produces("application/json")]
-    [Route("api/BookQueryApi")]
+    [Route("api/bookquery"),Authorize(Roles="Performer,Administrator")]
     public class BookQueryApiController : Controller
     {
         private ApplicationDbContext _context;
diff --git a/Yavsc/ApiControllers/EstimateApiController.cs b/Yavsc/ApiControllers/EstimateApiController.cs
index 2ed74d47..e32c08e4 100644
--- a/Yavsc/ApiControllers/EstimateApiController.cs
+++ b/Yavsc/ApiControllers/EstimateApiController.cs
@@ -1,5 +1,6 @@
 using System.Collections.Generic;
 using System.Linq;
+using Microsoft.AspNet.Authorization;
 using Microsoft.AspNet.Http;
 using Microsoft.AspNet.Mvc;
 using Microsoft.Data.Entity;
@@ -9,7 +10,7 @@ using Yavsc.Models.Billing;
 namespace Yavsc.Controllers
 {
     [Produces("application/json")]
-    [Route("api/Estimate")]
+    [Route("api/do"),Authorize(Roles="Performer,Administrator")]
     public class EstimateApiController : Controller
     {
         private ApplicationDbContext _context;