diff --git a/generic/views.py b/generic/views.py
index e4f83e8c..e832ab2b 100644
--- a/generic/views.py
+++ b/generic/views.py
@@ -847,6 +847,7 @@ class CidUserView(LoginRequiredMixin, SingleTableMixin, FilterView):
 
     filterset_class = CidUserFilter
 
+@login_required
 def create_cid_users(request):
     if request.is_ajax() and request.method == "POST":
         number = int(request.POST.get("number"))