diff --git a/cms/djangoapps/contentstore/views.py b/cms/djangoapps/contentstore/views.py
index 596391669d..2bec0272fa 100644
--- a/cms/djangoapps/contentstore/views.py
+++ b/cms/djangoapps/contentstore/views.py
@@ -188,6 +188,7 @@ def get_module_previews(descriptor):
     return preview_html
 
 
+@login_required
 @expect_json
 def save_item(request):
     item_location = request.POST['id']