diff --git a/src/controllers/03-employee-controller.ts b/src/controllers/03-employee-controller.ts
index 0ed4020..32e6c22 100644
--- a/src/controllers/03-employee-controller.ts
+++ b/src/controllers/03-employee-controller.ts
@@ -739,7 +739,12 @@ export class EmployeeFileController extends Controller {
   @Get("file-in-country-notice/{noticeId}")
   @Security("keycloak")
   @Tags("Employee In Country Notice")
-  async getNotice(@Path() employeeId: string, @Path() noticeId: string) {
+  async getNotice(
+    @Request() req: RequestWithUser,
+    @Path() employeeId: string,
+    @Path() noticeId: string,
+  ) {
+    await this.checkPermission(req.user, employeeId);
     return await getFile(fileLocation.employee.inCountryNotice(employeeId, noticeId));
   }