diff --git a/htdocs/compta/prelevement/bons.php b/htdocs/compta/prelevement/bons.php
index 172abe5523a..e98bff8d25e 100644
--- a/htdocs/compta/prelevement/bons.php
+++ b/htdocs/compta/prelevement/bons.php
@@ -28,6 +28,9 @@
 
 require("./pre.inc.php");
 
+if (!$user->rights->prelevement->bons->lire)
+  accessforbidden();
+
 $page = $_GET["page"];
 $sortorder = $_GET["sortorder"];
 $sortfield = $_GET["sortfield"];
diff --git a/htdocs/compta/prelevement/config.php b/htdocs/compta/prelevement/config.php
index cd93ed55b71..7080842fabe 100644
--- a/htdocs/compta/prelevement/config.php
+++ b/htdocs/compta/prelevement/config.php
@@ -28,6 +28,9 @@
 
 require("./pre.inc.php");
 
+if (!$user->rights->prelevement->bons->lire)
+  accessforbidden();
+
 $langs->load("admin");
 
 if ($_GET["action"] == "set" && $user->rights->prelevement->bons->configurer)
diff --git a/htdocs/compta/prelevement/fiche.php b/htdocs/compta/prelevement/fiche.php
index 7831f964a0b..fa4eb0a40e1 100644
--- a/htdocs/compta/prelevement/fiche.php
+++ b/htdocs/compta/prelevement/fiche.php
@@ -30,6 +30,9 @@
 
 require("./pre.inc.php");
 
+if (!$user->rights->prelevement->bons->lire)
+  accessforbidden();
+
 $langs->load("bills");
 
 /*
diff --git a/htdocs/compta/prelevement/liste.php b/htdocs/compta/prelevement/liste.php
index 7eb98d2e80a..7350c8b987a 100644
--- a/htdocs/compta/prelevement/liste.php
+++ b/htdocs/compta/prelevement/liste.php
@@ -21,6 +21,9 @@
  */
 require("./pre.inc.php");
 
+if (!$user->rights->prelevement->bons->lire)
+  accessforbidden();
+
 llxHeader('','Lignes de Prélèvements');
 /*
  * Sécurité accés client
diff --git a/htdocs/compta/prelevement/rejets.php b/htdocs/compta/prelevement/rejets.php
index 038b3587ffa..e9c8502e814 100644
--- a/htdocs/compta/prelevement/rejets.php
+++ b/htdocs/compta/prelevement/rejets.php
@@ -21,6 +21,9 @@
  */
 require("./pre.inc.php");
 
+if (!$user->rights->prelevement->bons->lire)
+  accessforbidden();
+
 require_once DOL_DOCUMENT_ROOT."/compta/prelevement/rejet-prelevement.class.php";
 require_once DOL_DOCUMENT_ROOT."/paiement.class.php";
 require_once DOL_DOCUMENT_ROOT."/lib/dolibarrmail.class.php";