diff --git a/addons/website/controllers/main.py b/addons/website/controllers/main.py
index 394a76e25d0..8019abba5c4 100644
--- a/addons/website/controllers/main.py
+++ b/addons/website/controllers/main.py
@@ -307,7 +307,7 @@ class Website(Home):
         view.with_context(website_id=None).reset_arch(mode)
         return request.redirect(redirect)
 
-    @http.route(['/website/publish'], type='json', auth="public", website=True)
+    @http.route(['/website/publish'], type='json', auth="user", website=True)
     def publish(self, id, object):
         Model = request.env[object]
         record = Model.browse(int(id))