diff --git a/htdocs/projet/facture.php b/htdocs/projet/facture.php
index 05d384ed6cc..42ab652433a 100644
--- a/htdocs/projet/facture.php
+++ b/htdocs/projet/facture.php
@@ -24,6 +24,9 @@ require("../propal.class.php");
 require("../facture.class.php");
 require("../commande/commande.class.php");
 
+$user->getrights('projet');
+if (!$user->rights->projet->lire)
+  accessforbidden();
 
 llxHeader("","../");