diff --git a/src/Entity/CourseAttendee.php b/src/Entity/CourseAttendee.php
index 7ce7bcb1e850c83f6f0d7af7fd5fff259f7c2b18..2e668c848d0169a90ebfe46bfb71f291ef86fa6f 100644
--- a/src/Entity/CourseAttendee.php
+++ b/src/Entity/CourseAttendee.php
@@ -15,6 +15,7 @@ use Symfony\Component\Serializer\Annotation\Groups;
  *     collectionOperations={
  *         "get" = {
  *             "path" = "/course_attendees",
+ *             "security" = "is_granted('IS_AUTHENTICATED_FULLY')",
  *             "openapi_context" = {
  *                 "tags" = {"Courses"}
  *             }
@@ -41,6 +42,7 @@ use Symfony\Component\Serializer\Annotation\Groups;
  *     itemOperations={
  *         "get" = {
  *             "path" = "/course_attendees/{identifier}",
+ *             "security" = "is_granted('IS_AUTHENTICATED_FULLY')",
  *             "openapi_context" = {
  *                 "tags" = {"Courses"}
  *             }