diff --git a/app/controllers/repositories_controller.rb b/app/controllers/repositories_controller.rb
index 7e708f5e1..519a63bd9 100644
--- a/app/controllers/repositories_controller.rb
+++ b/app/controllers/repositories_controller.rb
@@ -88,6 +88,7 @@ class RepositoriesController < ApplicationController
   end
 
   def edit
+    return render_forbidden if !@project.manager?(current_user)
   end
 
   def create_file