diff --git a/equipment_tracker/transactions/views.py b/equipment_tracker/transactions/views.py
index 85de10e..a0d4066 100644
--- a/equipment_tracker/transactions/views.py
+++ b/equipment_tracker/transactions/views.py
@@ -8,6 +8,6 @@ class TransactionViewSet(viewsets.ModelViewSet):
     # Only allow GET, POST/CREATE
     # Transactions cannot be deleted
     http_method_names = ['get', 'post']
-    # permission_classes = [IsAuthenticated]
+    permission_classes = [IsAuthenticated]
     serializer_class = TransactionSerializer
     queryset = Transaction.objects.all()