diff --git a/pkg/internal/server/api/products_api.go b/pkg/internal/server/api/products_api.go
index 607da7c..69c24c6 100644
--- a/pkg/internal/server/api/products_api.go
+++ b/pkg/internal/server/api/products_api.go
@@ -75,7 +75,7 @@ func getProduct(c *fiber.Ctx) error {
 }
 
 func createProduct(c *fiber.Ctx) error {
-	if err := sec.EnsureAuthenticated(c); err != nil {
+	if err := sec.EnsureGrantedPerm(c, "CreateMaProducts", true); err != nil {
 		return err
 	}
 	user := c.Locals("nex_user").(*sec.UserInfo)
diff --git a/pkg/internal/server/api/releases_api.go b/pkg/internal/server/api/releases_api.go
index 191ee44..11aeef8 100644
--- a/pkg/internal/server/api/releases_api.go
+++ b/pkg/internal/server/api/releases_api.go
@@ -62,7 +62,7 @@ func getRelease(c *fiber.Ctx) error {
 }
 
 func createRelease(c *fiber.Ctx) error {
-	if err := sec.EnsureAuthenticated(c); err != nil {
+	if err := sec.EnsureGrantedPerm(c, "CreateMaReleases", true); err != nil {
 		return err
 	}
 	user := c.Locals("nex_user").(*sec.UserInfo)