diff --git a/cps/admin.py b/cps/admin.py
index 5451080a..26fbe42b 100644
--- a/cps/admin.py
+++ b/cps/admin.py
@@ -189,8 +189,8 @@ def reconnect():
 
 
 @admi.route("/ajax/updateThumbnails", methods=['POST'])
-@admin_required
 @user_login_required
+@admin_required
 def update_thumbnails():
     content = config.get_scheduled_task_settings()
     if content['schedule_generate_book_covers']: