diff --git a/routers/api/v1/api.go b/routers/api/v1/api.go
index c2e0e1aa34..af3192aea8 100644
--- a/routers/api/v1/api.go
+++ b/routers/api/v1/api.go
@@ -1526,7 +1526,7 @@ func Routes() *web.Router {
 							m.Combo("").
 								Put(bind(api.LockIssueOption{}), repo.LockIssue).
 								Delete(repo.UnlockIssue)
-						}, reqToken())
+						}, reqToken(), reqAdmin())
 					})
 				}, mustEnableIssuesOrPulls)
 				m.Group("/labels", func() {