diff --git a/backend/src/plugins/Tags.ts b/backend/src/plugins/Tags.ts
index 21e78c7a..4a2511f1 100644
--- a/backend/src/plugins/Tags.ts
+++ b/backend/src/plugins/Tags.ts
@@ -192,6 +192,7 @@ export class TagsPlugin extends ZeppelinPlugin<TConfigSchema> {
       },
     ],
   })
+  @d.permission("can_create")
   async tagSourceCmd(msg: Message, args: { tag: string; delete?: boolean }) {
     if (args.delete) {
       return this.deleteTagCmd(msg, { tag: args.tag });