diff --git a/src/Controllers/PostController.php b/src/Controllers/PostController.php
index 069678c2..ae0a27eb 100644
--- a/src/Controllers/PostController.php
+++ b/src/Controllers/PostController.php
@@ -77,6 +77,7 @@ final class PostController extends AbstractController
 
 	public function getByNameOrId($postNameOrId)
 	{
+		$this->privilegeService->assertPrivilege(Privilege::VIEW_POSTS);
 		$post = $this->postService->getByNameOrId($postNameOrId);
 		return $this->postViewProxy->fromEntity($post, $this->getFullFetchConfig());
 	}