diff --git a/plinth/modules/ttrss/data/etc/apache2/conf-available/tt-rss-plinth.conf b/plinth/modules/ttrss/data/etc/apache2/conf-available/tt-rss-plinth.conf
index 8ec6b983d..b09d63c68 100644
--- a/plinth/modules/ttrss/data/etc/apache2/conf-available/tt-rss-plinth.conf
+++ b/plinth/modules/ttrss/data/etc/apache2/conf-available/tt-rss-plinth.conf
@@ -21,6 +21,6 @@ Alias /tt-rss-app /usr/share/tt-rss/www
 
 <Location /tt-rss-app>
     Include includes/freedombox-auth-ldap.conf
-    Require valid-user
-    # TODO Restrict access to `feed-reader` group
+    Require ldap-group cn=admin,ou=groups,dc=thisbox
+    Require ldap-group cn=feed-reader,ou=groups,dc=thisbox
 </Location>