diff --git a/store/views.py b/store/views.py
index 7111d39..92ef5c5 100644
--- a/store/views.py
+++ b/store/views.py
@@ -176,6 +176,7 @@ class PickupAPI(DisablePermissionsMixin):
 
 class PaymentMethodsAPI(generics.GenericAPIView):
     serializer_class = PaymentMethodSerializer
+    permission_classes = [IsAuthenticated | ReadOnly]
 
     def get_queryset(self):
         return PaymentMethod.objects.all()