diff --git a/authority/templates/admin/permission_change_form.html b/authority/templates/admin/permission_change_form.html
index 4f1fe0b..9daba60 100644
--- a/authority/templates/admin/permission_change_form.html
+++ b/authority/templates/admin/permission_change_form.html
@@ -23,6 +23,7 @@
 
 {% block content %}<div id="content-main">
 <form action="{{ form_url }}" method="post" id="{{ opts.module_name }}_form">
+{% csrf_token %}
 <div>
 {% if is_popup %}<input type="hidden" name="_popup" value="1" />{% endif %}
 {% if save_on_top %}{% submit_row %}{% endif %}