diff --git a/app/controllers/migration_log_controller.rb b/app/controllers/migration_log_controller.rb
index 0488ec8393..8a744693c1 100644
--- a/app/controllers/migration_log_controller.rb
+++ b/app/controllers/migration_log_controller.rb
@@ -10,6 +10,7 @@ class MigrationLogController < ApplicationController
   # are rendered.
   #
   def download_migration_log
+    assert_privileges('migration')
     plan_task = ServiceTemplateTransformationPlanTask.find(params[:id])
     log_type = params[:log_type] || 'v2v'
     miq_tasks_id = plan_task.transformation_log_queue(nil, log_type)