diff --git a/code/websites/pokedex.online/src/components/DeveloperTools.vue b/code/websites/pokedex.online/src/components/DeveloperTools.vue
index 6924f92..406af1e 100644
--- a/code/websites/pokedex.online/src/components/DeveloperTools.vue
+++ b/code/websites/pokedex.online/src/components/DeveloperTools.vue
@@ -132,11 +132,14 @@ const {
 
 const isOpen = ref(false);
 
-// Show in development mode or when authenticated in production
+// Show in development mode or when authenticated with permission in production
 const isAvailable = computed(() => {
   const isDev = process.env.NODE_ENV === 'development';
+  const hasPermission = user.value?.permissions?.includes(
+    'developer_tools.view'
+  );
   const isAuthenticatedInProduction =
-    process.env.NODE_ENV === 'production' && user.value;
+    process.env.NODE_ENV === 'production' && user.value && hasPermission;
   return isDev || isAuthenticatedInProduction;
 });
 const nodeEnv = computed(() => process.env.NODE_ENV || 'unknown');