diff --git a/assets b/assets
index 2e995f1d..08348410 160000
--- a/assets
+++ b/assets
@@ -1 +1 @@
-Subproject commit 2e995f1d4676d15b714dd82cb3aefe2e7697fcea
+Subproject commit 083484109f15e361bc92330ec0318fe758d43d72
diff --git a/routers/router.go b/routers/router.go
index 1b9b23bf..846f81af 100644
--- a/routers/router.go
+++ b/routers/router.go
@@ -928,6 +928,7 @@ func initMasterRouter(dep dependency.Dep) *gin.Engine {
 				tool := admin.Group("tool")
 				{
 					tool.GET("wopi",
+						middleware.RequiredScopes(types.ScopeAdminWrite),
 						controllers.FromQuery[adminsvc.FetchWOPIDiscoveryService](adminsvc.FetchWOPIDiscoveryParamCtx{}),
 						controllers.AdminFetchWopi,
 					)
@@ -936,6 +937,7 @@ func initMasterRouter(dep dependency.Dep) *gin.Engine {
 						controllers.FromJSON[adminsvc.ThumbGeneratorTestService](adminsvc.ThumbGeneratorTestParamCtx{}),
 						controllers.AdminTestThumbGenerator)
 					tool.POST("mail",
+						middleware.RequiredScopes(types.ScopeAdminWrite),
 						controllers.FromJSON[adminsvc.TestSMTPService](adminsvc.TestSMTPParamCtx{}),
 						controllers.AdminSendTestMail,
 					)