diff --git a/backend/apps/datasource/api/datasource.py b/backend/apps/datasource/api/datasource.py
index cbf992c1..1e72c3fb 100644
--- a/backend/apps/datasource/api/datasource.py
+++ b/backend/apps/datasource/api/datasource.py
@@ -243,8 +243,9 @@ def inner():
 
 
 # not used
-@router.post("/fieldEnum/{id}", include_in_schema=False)
-async def field_enum(session: SessionDep, id: int):
+@router.post("/fieldEnum/{ds_id}/{id}", include_in_schema=False)
+@require_permissions(permission=SqlbotPermission(type='ds', keyExpression="ds_id"))
+async def field_enum(session: SessionDep, ds_id: int, id: int):
     def inner():
         return fieldEnum(session, id)