diff --git a/aidbox-resources.yaml b/aidbox-resources.yaml
index 70fb495..7e9b1e9 100644
--- a/aidbox-resources.yaml
+++ b/aidbox-resources.yaml
@@ -23,13 +23,17 @@ id: ui-user-actions
 resourceType: AccessPolicy
 engine: matcho
 matcho:
-  user:
-    id: present?
   uri:
     $one-of:
       - '#/ui/patients/.+'
       - /ui/patients
       - '#/ui/forms/.+'
+      - '#/fhir/Questionnaire.+'
+      - '#/fhir/QuestionnaireResponse.+'
+      - '#/Questionnaire.+'
+      - '#/QuestionnaireResponse.+'
+  user:
+    id: present?
 ---
 id: public-ui-auth
 resourceType: AccessPolicy