diff --git a/frontend/middleware/admin.js b/frontend/middleware/admin.js
new file mode 100644
index 0000000000000000000000000000000000000000..79b0ce7f43c6184eef9f52d8f915fa9b696bc5c4
--- /dev/null
+++ b/frontend/middleware/admin.js
@@ -0,0 +1,5 @@
+export default function ({$auth, error}) {
+  if (!$auth.hasScope('admin')) {
+    error({statusCode: 401, message: 'Not authorized'})
+  }
+}