diff --git a/apiserver/apiserver/api/views.py b/apiserver/apiserver/api/views.py
index 3f9af50..d6cb000 100644
--- a/apiserver/apiserver/api/views.py
+++ b/apiserver/apiserver/api/views.py
@@ -141,7 +141,7 @@ class MemberViewSet(Base, Retrieve, Update):
 
 
 class CardViewSet(Base, Create, Retrieve, Update, Destroy):
-    permission_classes = [AllowMetadata | IsAuthenticated, IsAdmin]
+    permission_classes = [AllowMetadata | IsAdmin]
     queryset = models.Card.objects.all()
     serializer_class = serializers.CardSerializer