diff --git a/src/documents/views.py b/src/documents/views.py
index 02022e327..828c725df 100644
--- a/src/documents/views.py
+++ b/src/documents/views.py
@@ -2302,7 +2302,12 @@ class DocumentViewSet(
             },
         ),
     )
-    @action(methods=["post"], detail=True, url_path="run-zone-ocr")
+    @action(
+        methods=["post"],
+        detail=True,
+        url_path="run-zone-ocr",
+        permission_classes=[IsAuthenticated],
+    )
     def run_zone_ocr(self, request, pk=None):
         """
         Run zone-based OCR extraction on this document, with the given template