diff --git a/lib/www/server/api/index.js b/lib/www/server/api/index.js
index 28de495..e15807e 100644
--- a/lib/www/server/api/index.js
+++ b/lib/www/server/api/index.js
@@ -161,7 +161,7 @@ app.map({
 // 		post: [ mw.info.post ],
 	},
 	'/project/:project/meta/': {
-		put: [ mw.meta.put ],
+		put: [ mw.auth.access.write, mw.meta.put ],
 	},
 	'/project/:project/meta/:path(*)': {
 		// Path examples: