diff --git a/app/controllers/external_users_controller.rb b/app/controllers/external_users_controller.rb
index a7d39341..7b3e1a91 100644
--- a/app/controllers/external_users_controller.rb
+++ b/app/controllers/external_users_controller.rb
@@ -1,4 +1,6 @@
 class ExternalUsersController < ApplicationController
+  before_action :require_user!
+
   def authorize!
     authorize(@user || @users)
   end