diff --git a/advanced-setup/docker-compose.yml b/advanced-setup/docker-compose.yml
index e58bf9e..760e1e9 100644
--- a/advanced-setup/docker-compose.yml
+++ b/advanced-setup/docker-compose.yml
@@ -100,47 +100,7 @@ services:
               "orthanc-explorer-2"
             ],
             "TokenHttpHeaders" : [ "api-key" ],
-            "CheckedLevel": "studies",
-            "Permissions": [
-              ["post", "^/auth/tokens/decode$", ""],
-              ["post", "^/tools/lookup$", ""], // currently used to authorize downloads in Stone (to map the StudyInstanceUID into an OrthancID.  Not ideal -> we should define a new API that has the resource ID in the path to be able to check it at resource level) but, on another hand, you do not get any Patient information from this route
-              ["post", "^/tools/find$", "all|view"],
-              ["get" , "^/(patients|studies|series|instances)(|/)", "all|view"],
-              ["get" , "^/(patients|studies|series|instances)/([a-f0-9-]+)$", "all|view"],
-              ["get" , "^/(patients|studies|series|instances)/([a-f0-9-]+)/(studies|study|series|instances)$", "all|view"],
-              ["get" , "^/instances/([a-f0-9-]+)/(tags|header)$", "all|view"],
-              ["get" , "^/statistics$", "all|view"],
-              ["get" , "^/changes$", "all|view"],
-              ["put", "^/auth/tokens/(viewer-instant-link|meddream-instant-link)$", "all|view"],
-              ["put", "^/auth/tokens/(download-instant-link)$", "all|download"],
-              ["put", "^/auth/tokens/(stone-viewer-publication|meddream-viewer-publication|osimis-viewer-publication|ohif-viewer-publication)$", "all|share"],
-              ["post", "^/instances$", "all|upload"],
-              ["post" , "^/DICOM_WEB_ROOT/studies$", "all|upload"],
-              ["get" , "^/jobs/([a-f0-9-]+)$", "all|send|modify|anonymize|q-r-remote-modalities"],
-              ["post", "^/(peers|modalities)/(.*)/store$", "all|send"],
-              ["get" , "^/(peers|modalities)$", "all|send|q-r-remote-modalities"],
-              ["post", "^/modalities/(.*)/echo$", "all|send|q-r-remote-modalities"],
-              ["post", "^/modalities/(.*)/query$", "all|q-r-remote-modalities"],
-              ["get", "^/queries/([a-f0-9-]+)/answers$", "all|q-r-remote-modalities"],
-              ["post", "^/modalities/(.*)/move$", "all|q-r-remote-modalities"],
-              ["get" , "^/DICOM_WEB_ROOT/servers$", "all|send|q-r-remote-modalities"],
-              ["get" , "^/DICOM_WEB_ROOT/(servers)/(.*)/stow$", "all|send"],
-              ["get" , "^/DICOM_WEB_ROOT/studies$", "all|view"],
-              ["get" , "^/DICOM_WEB_ROOT/(studies|series|instances)(|/)$", "all|view"],
-              ["get" , "^/DICOM_WEB_ROOT/studies/([.0-9]+)(|/series|/metadata)(|/)$", "all|view"],
-              ["get" , "^/DICOM_WEB_ROOT/studies/([.0-9]+)/series/([.0-9]+)(|/instances|/rendered|/metadata)(|/)$", "all|view"],
-              ["get" , "^/DICOM_WEB_ROOT/studies/([.0-9]+)/series/([.0-9]+)/instances/([.0-9]+)(|/|/frames/.*|/rendered|/metadata|/bulk/.*)(|/)$", "all|view"],
-              ["post", "^/(patients|studies|series|instances)/([a-f0-9-]+)/(modify|merge)(.*)$", "all|modify"],
-              ["post", "^/(patients|studies|series|instances)/([a-f0-9-]+)/anonymize(.*)$", "all|anonymize"],
-              ["get", "^/tools/labels$", "all|view|edit-labels"],
-              ["get" , "^/(patients|studies|series|instances)/([a-f0-9-]+)/labels$", "all|view"],
-              ["put" , "^/(patients|studies|series|instances)/([a-f0-9-]+)/labels/(.*)$", "all|edit-labels"],
-              ["delete" , "^/(patients|studies|series|instances)/([a-f0-9-]+)/labels/(.*)$", "all|edit-labels"],
-              ["delete" , "^/(patients|studies|series|instances)/([a-f0-9-]+)$", "all|delete"],
-              ["post" , "^/tools/bulk-delete$", "all|delete"],
-              ["put", "^/tools/log-level$", "all|settings"],
-              ["get", "^/tools/log-level$", "all|settings"]
-            ]
+            "CheckedLevel": "studies"
           },
           "DicomWeb": {
             "Enable": true,