diff --git a/taiga/projects/api.py b/taiga/projects/api.py
index 9a852bfc..0b0a38bb 100644
--- a/taiga/projects/api.py
+++ b/taiga/projects/api.py
@@ -93,6 +93,12 @@ class ProjectViewSet(ModelCrudViewSet):
         self.check_permissions(request, 'tags', project)
         return Response(services.get_all_tags(project))
 
+    @detail_route(methods=['get'])
+    def tags_colors(self, request, pk=None):
+        project = self.get_object()
+        self.check_permissions(request, 'tags_colors', project)
+        return Response(dict(project.tags_colors))
+
     @detail_route(methods=['get'])
     def fans(self, request, pk=None):
         project = self.get_object()
diff --git a/taiga/projects/permissions.py b/taiga/projects/permissions.py
index 9185d59b..fd7c572b 100644
--- a/taiga/projects/permissions.py
+++ b/taiga/projects/permissions.py
@@ -30,7 +30,8 @@ class ProjectPermission(ResourcePermission):
     unstar_perms = IsAuthenticated()
     issues_stats_perms = AllowAny()
     issues_filters_data_perms = AllowAny()
-    tags_perms = AllowAny()
+    tags_perms = HasProjectPerm('view_project')
+    tags_colors_perms = HasProjectPerm('view_project')
     fans_perms = HasProjectPerm('view_project')
     create_template_perms = IsSuperUser()