diff --git a/htdocs/fourn/facture/index.php b/htdocs/fourn/facture/index.php
index 0ebef580e43..9fae5970231 100644
--- a/htdocs/fourn/facture/index.php
+++ b/htdocs/fourn/facture/index.php
@@ -31,6 +31,9 @@
 require("./pre.inc.php");
 require("../../contact.class.php");
 
+if (!$user->rights->fournisseur->facture->lire)
+  accessforbidden();
+
 llxHeader();
 
 $socid = $_GET["socid"];