diff --git a/aleksis/core/views.py b/aleksis/core/views.py
index b9d7d502cdfee47f2490650d3822d661e4abf314..2ee83523ca49c5b112579a98b49147dbf3afcff8 100644
--- a/aleksis/core/views.py
+++ b/aleksis/core/views.py
@@ -865,9 +865,11 @@ class DashboardWidgetDeleteView(PermissionRequiredMixin, AdvancedDeleteView):
     success_message = _("The dashboard widget has been deleted.")
 
 
-class EditDashboardView(View):
+class EditDashboardView(PermissionRequiredMixin, View):
     """View for editing dashboard widget order."""
 
+    permission_required = "core.edit_dashboard"
+
     def get_context_data(self, request, **kwargs):
         context = {}
         self.default_dashboard = kwargs.get("default", False)