diff --git a/api/routes/request.js b/api/routes/request.js
index 3546fae..07b0ad1 100644
--- a/api/routes/request.js
+++ b/api/routes/request.js
@@ -58,8 +58,7 @@ request.route('/award')
 
 request.route('/promotion')
 
-  .get((req, res, next) => {
-    // TODO: add SQL authetnication
+  .get(apiAuthenticationMiddleware, checkSql, (req, res, next) => {
     const squadFilter = req.query.squadId;
     const fractFilter = req.query.fractFilter;
     const progressFilter = req.query.inProgress;