diff --git a/src/main/resources/templates/_fragments.html b/src/main/resources/templates/_fragments.html
index d4802b4..16c1c64 100644
--- a/src/main/resources/templates/_fragments.html
+++ b/src/main/resources/templates/_fragments.html
@@ -78,9 +78,9 @@
                     <a th:href="@{/store/}" class="nav-link"
                        th:classappend="${#strings.startsWith(#httpServletRequest.getRequestURI(), '/ctp/store') ? 'active' : ''}">Store</a>
                 </li>
-                <li class="nav-item"
-                    th:classappend="${#strings.startsWith(#httpServletRequest.getRequestURI(), '/ctp/po-status') ? 'active' : ''}">
-                    <a th:href="@{/po-status/}" class="nav-link">Online PO Status</a>
+                <li class="nav-item" sec:authorize="hasAnyRole('ROLE_PURCHASE_ORDER', 'ROLE_ADMIN')">
+                    <a th:href="@{/po-status/}" class="nav-link"
+                       th:classappend="${#strings.startsWith(#httpServletRequest.getRequestURI(), '/ctp/po-status') ? 'active' : ''}">Online PO Status</a>
                 </li>
                 <li class="nav-item" sec:authorize="hasAnyRole('ROLE_REPORTING', 'ROLE_ADMIN')">
                     <a th:href="@{/reporting/}" class="nav-link"