diff --git a/tag/user.php b/tag/user.php
index 983fdb95a205a..8b8d7abd9327a 100644
--- a/tag/user.php
+++ b/tag/user.php
@@ -45,7 +45,7 @@
         break;
 
     case 'flaginappropriate':
-
+        require_capability('moodle/tag:flag', context_system::instance());
         $tagid = tag_get_id($tag);
 
         tag_set_flag($tagid);