diff --git a/src/main/kotlin/dev/usbharu/hideout/application/config/SecurityConfig.kt b/src/main/kotlin/dev/usbharu/hideout/application/config/SecurityConfig.kt
index fd129a61..ec87b8e8 100644
--- a/src/main/kotlin/dev/usbharu/hideout/application/config/SecurityConfig.kt
+++ b/src/main/kotlin/dev/usbharu/hideout/application/config/SecurityConfig.kt
@@ -180,6 +180,8 @@ class SecurityConfig {
 
                 authorize(POST, "/inbox", permitAll)
                 authorize(POST, "/users/*/inbox", permitAll)
+                authorize(GET, "/users/*", permitAll)
+                authorize(GET, "/users/*/posts/*", permitAll)
 
                 authorize(POST, "/api/v1/apps", permitAll)
                 authorize(GET, "/api/v1/instance/**", permitAll)