diff --git a/src/controllers/05-payment-controller.ts b/src/controllers/05-payment-controller.ts
index 622ce10..63d7bd7 100644
--- a/src/controllers/05-payment-controller.ts
+++ b/src/controllers/05-payment-controller.ts
@@ -231,6 +231,7 @@ export class PaymentFileController extends Controller {
   }
 
   @Get("{name}")
+  @Security("keycloak")
   async getAttachment(
     @Request() req: RequestWithUser,
     @Path() paymentId: string,