--- a/ForgeGit/forgegit/git_main.py
+++ b/ForgeGit/forgegit/git_main.py
@@ -28,7 +28,7 @@
 from allura.lib import helpers as h
 from allura.lib.search import search
 from allura.lib.decorators import audit, react
-from allura.lib.security import require, has_artifact_access, has_project_access
+from allura.lib.security import require, has_artifact_access, has_project_access, require_authenticated
 from allura.model import Project, ProjectRole, User, ArtifactReference, Feed
 from allura.controllers import BaseController
 
@@ -193,6 +193,7 @@
     @with_trailing_slash
     @expose('forgegit.templates.fork')
     def fork(self, to_name=None):
+        require_authenticated()
         from_repo = c.app.repo
         to_project_name = 'u/' + c.user.username
         ThreadLocalORMSession.flush_all()