diff --git a/application/Espo/Modules/Crm/Controllers/Activities.php b/application/Espo/Modules/Crm/Controllers/Activities.php
index 09151b6094..4213e428cd 100644
--- a/application/Espo/Modules/Crm/Controllers/Activities.php
+++ b/application/Espo/Modules/Crm/Controllers/Activities.php
@@ -32,6 +32,10 @@ class Activities extends \Espo\Core\Controllers\Base
     
     public function actionListCalendarEvents($params, $data, $request)
     {
+        if (!$this->getAcl()->check('Calendar')) {
+            throw new Forbidden();
+        }
+
         $from = $request->get('from');
         $to = $request->get('to');