diff --git a/api/anubis/views/public/forum.py b/api/anubis/views/public/forum.py
index 9509e74b..d66063f8 100644
--- a/api/anubis/views/public/forum.py
+++ b/api/anubis/views/public/forum.py
@@ -14,7 +14,7 @@
     ForumPostComment,
     ForumPostViewed,
 )
-from anubis.utils.auth.http import require_user
+from anubis.utils.auth.http import require_user, require_admin
 from anubis.utils.auth.user import current_user
 from anubis.utils.auth.user import verify_in_course
 from anubis.utils.http import success_response
@@ -245,7 +245,7 @@ def public_delete_forum_post_comment(comment_id: str):
 
 
 @forum_.post('/image')
-@require_user()
+@require_admin()
 @json_response
 def public_post_forum_image():
     image = process_file_upload()
diff --git a/web/src/navconfig.jsx b/web/src/navconfig.jsx
index 3bdcc675..75e2640a 100644
--- a/web/src/navconfig.jsx
+++ b/web/src/navconfig.jsx
@@ -107,12 +107,6 @@ export const public_nav = [
         path: '/courses',
         Page: Courses,
       },
-      {
-        id: 'Forum',
-        icon: <ForumIcon/>,
-        path: '/forum',
-        Page: Forum,
-      },
       {
         id: 'Lectures',
         icon: <ImportContactsIcon/>,
@@ -162,6 +156,12 @@ export const admin_nav = [
     Page: AdminCourse,
     exact: false,
   },
+  {
+    id: 'Forum',
+    icon: <ForumIcon/>,
+    path: '/forum',
+    Page: Forum,
+  },
   {
     id: 'Lectures',
     icon: <ImportContactsIcon/>,