diff --git a/aleksis/core/views.py b/aleksis/core/views.py
index 151852d840b265591f420da6541ea9c6eaeb6247..6c4fad570d22c05d3b057fa6f8b24e2c8e1dee8a 100644
--- a/aleksis/core/views.py
+++ b/aleksis/core/views.py
@@ -358,6 +358,7 @@ def delete_announcement(request: HttpRequest, pk: int) -> HttpResponse:
     return redirect("announcements")
 
 
+@permission_required("core.search")
 def searchbar_snippets(request: HttpRequest) -> HttpResponse:
     query = request.GET.get('q', '')
     limit = int(request.GET.get('limit', '5'))