diff --git a/.env.example b/.env.example
index 19551ab0..2b0468c2 100644
--- a/.env.example
+++ b/.env.example
@@ -29,7 +29,7 @@ HAPI_HASURA_URL=http://hasura:8080/v1/graphql
 HAPI_HASURA_ADMIN_SECRET=myadminsecretkey
 # HASURA
 HASURA_GRAPHQL_DATABASE_URL=postgres://user:password@eosrate_postgres:5432/eosrate
-HASURA_GRAPHQL_ADMIN_SECRET=hasurasecret
+HASURA_GRAPHQL_ADMIN_SECRET=myadminsecretkey
 HASURA_GRAPHQL_UNAUTHORIZED_ROLE=anonymous
 HASURA_GRAPHQL_ACTION_BASE_URL=http://hapi:9090
 # WEBAPP
diff --git a/hasura/metadata/actions.yaml b/hasura/metadata/actions.yaml
index 6ea1e1d7..f3ea8328 100644
--- a/hasura/metadata/actions.yaml
+++ b/hasura/metadata/actions.yaml
@@ -4,6 +4,8 @@ actions:
       kind: synchronous
       handler: '{{HASURA_GRAPHQL_ACTION_BASE_URL}}/get-rates-stats'
       forward_client_headers: true
+    permissions:
+      - role: anonymous
   - name: rateProducer
     definition:
       kind: synchronous