diff --git a/src/Tgstation.Server.Host/Security/TgsGraphQLAuthorizeAttribute.cs b/src/Tgstation.Server.Host/Security/TgsGraphQLAuthorizeAttribute.cs
index 41f7ab7f37..e03e7e6081 100644
--- a/src/Tgstation.Server.Host/Security/TgsGraphQLAuthorizeAttribute.cs
+++ b/src/Tgstation.Server.Host/Security/TgsGraphQLAuthorizeAttribute.cs
@@ -127,6 +127,7 @@ namespace Tgstation.Server.Host.Security
 			var listRoles = roleNames.ToList();
 			listRoles.Add(TgsAuthorizeAttribute.UserEnabledRole);
 			Roles = [.. listRoles];
+			Apply = ApplyPolicy.Validation;
 		}
 	}
 }
diff --git a/src/Tgstation.Server.Host/Security/TgsGraphQLAuthorizeAttribute{TAuthority}.cs b/src/Tgstation.Server.Host/Security/TgsGraphQLAuthorizeAttribute{TAuthority}.cs
index fb890f7e92..495424073a 100644
--- a/src/Tgstation.Server.Host/Security/TgsGraphQLAuthorizeAttribute{TAuthority}.cs
+++ b/src/Tgstation.Server.Host/Security/TgsGraphQLAuthorizeAttribute{TAuthority}.cs
@@ -35,6 +35,7 @@ namespace Tgstation.Server.Host.Security
 				?? throw new InvalidOperationException($"Could not find method {authorityType}.{methodName}() has no {nameof(TgsAuthorizeAttribute)}!");
 			MethodName = methodName;
 			Roles = authorizeAttribute.Roles?.Split(',', StringSplitOptions.RemoveEmptyEntries);
+			Apply = ApplyPolicy.Validation;
 		}
 	}
 }