diff --git a/app/controllers/spree/api/products_controller.rb b/app/controllers/spree/api/products_controller.rb
index dacd6b6948..8a8d4475f5 100644
--- a/app/controllers/spree/api/products_controller.rb
+++ b/app/controllers/spree/api/products_controller.rb
@@ -5,7 +5,7 @@ module Spree
     class ProductsController < ::Api::BaseController
       respond_to :json
 
-      skip_authorization_check only: [:show]
+      skip_authorization_check only: [:show, :bulk_products, :overridable]
 
       def show
         @product = find_product(params[:id])