diff --git a/src/api2/access/acl.rs b/src/api2/access/acl.rs
index 1c7517dc..d436c437 100644
--- a/src/api2/access/acl.rs
+++ b/src/api2/access/acl.rs
@@ -103,6 +103,7 @@ pub fn read_acl(
 }
 
 #[api(
+    protected: true,
     input: {
         properties: {
 	    path: {