diff --git a/app/Http/Controllers/Api/AssetsController.php b/app/Http/Controllers/Api/AssetsController.php
index fcdf683498..5acc533cd5 100644
--- a/app/Http/Controllers/Api/AssetsController.php
+++ b/app/Http/Controllers/Api/AssetsController.php
@@ -1290,7 +1290,8 @@ class AssetsController extends Controller
 
     public function assignedAssets(Request $request, Asset $asset) : JsonResponse | array
     {
-        // @todo: authorization
+        $this->authorize('view', Asset::class);
+        $this->authorize('view', $asset);
 
         $query = Asset::where([
             'assigned_to' => $asset->id,