diff --git a/app/Http/Controllers/Forms/FormSubmissionController.php b/app/Http/Controllers/Forms/FormSubmissionController.php
index 28ffc30..dca04b1 100644
--- a/app/Http/Controllers/Forms/FormSubmissionController.php
+++ b/app/Http/Controllers/Forms/FormSubmissionController.php
@@ -30,6 +30,7 @@ class FormSubmissionController extends Controller
     public function export(string $id)
     {
         $form = Form::findOrFail((int) $id);
+        $this->authorize('view', $form);
 
         $allRows = [];
         foreach ($form->submissions->toArray() as $row) {