diff --git a/ServiceManager.cpp b/ServiceManager.cpp
index 90b5dd8..6a9864f 100644
--- a/ServiceManager.cpp
+++ b/ServiceManager.cpp
@@ -306,6 +306,11 @@
 
     auto pidcon = getBinderCallingContext();
 
+    if (!mAcl.canAdd(IBase::descriptor, pidcon)) {
+        LOG(ERROR) << "Missing permissions to add IBase";
+        return false;
+    }
+
     auto ret = service->interfaceChain([&](const auto &interfaceChain) {
         addSuccess = addImpl(name, service, interfaceChain, pidcon);
     });