diff --git a/rowers/views/apiviews.py b/rowers/views/apiviews.py
index 428cf684..33a19dba 100644
--- a/rowers/views/apiviews.py
+++ b/rowers/views/apiviews.py
@@ -81,6 +81,7 @@ from rest_framework_swagger.renderers import OpenAPIRenderer, SwaggerUIRenderer
 @csrf_exempt
 @login_required()
 @api_view(["GET","POST"])
+@permission_classes([IsAuthenticated])
 def strokedatajson_v2(request,id):
     """
     POST: Add Stroke data to workout
diff --git a/rowers/views/statements.py b/rowers/views/statements.py
index 9061fb13..46a19e38 100644
--- a/rowers/views/statements.py
+++ b/rowers/views/statements.py
@@ -686,7 +686,8 @@ try:
 except ImportError:
     pass
 
-from rest_framework.decorators import api_view, renderer_classes
+from rest_framework.decorators import api_view, renderer_classes, permission_classes
+from rest_framework.permissions import IsAuthenticated
 
 
 from rowers.permissions import IsOwnerOrNot, IsCompetitorOrNot