diff --git a/backend/src/routes/stacks.ts b/backend/src/routes/stacks.ts
index 50b995a3..b01e7fe5 100644
--- a/backend/src/routes/stacks.ts
+++ b/backend/src/routes/stacks.ts
@@ -195,6 +195,7 @@ stacksRouter.param('stackName', (req, res, next, stackName) => {
 });
 
 stacksRouter.get('/', async (req: Request, res: Response) => {
+  if (!requirePermission(req, res, 'stack:read')) return;
   try {
     const stacks = await FileSystemService.getInstance(req.nodeId).getStacks();
     res.json(stacks);
@@ -204,6 +205,7 @@ stacksRouter.get('/', async (req: Request, res: Response) => {
 });
 
 stacksRouter.get('/statuses', async (req: Request, res: Response) => {
+  if (!requirePermission(req, res, 'stack:read')) return;
   try {
     const result = await CacheService.getInstance().getOrFetch(
       `stack-statuses:${req.nodeId}`,