diff --git a/cdap-app-fabric/src/main/java/io/cdap/cdap/metadata/LineageHTTPHandler.java b/cdap-app-fabric/src/main/java/io/cdap/cdap/metadata/LineageHTTPHandler.java
index 18d171435956..7bc6260bebb8 100644
--- a/cdap-app-fabric/src/main/java/io/cdap/cdap/metadata/LineageHTTPHandler.java
+++ b/cdap-app-fabric/src/main/java/io/cdap/cdap/metadata/LineageHTTPHandler.java
@@ -32,6 +32,7 @@
 import io.cdap.cdap.proto.ProgramType;
 import io.cdap.cdap.proto.codec.NamespacedEntityIdCodec;
 import io.cdap.cdap.proto.id.DatasetId;
+import io.cdap.cdap.proto.id.NamespaceId;
 import io.cdap.cdap.proto.id.NamespacedEntityId;
 import io.cdap.cdap.proto.id.ProgramReference;
 import io.cdap.cdap.proto.metadata.lineage.CollapseType;
@@ -142,6 +143,8 @@ public void getEndpointSummary(HttpRequest request, HttpResponder responder,
       @PathParam("program-type") String programType,
       @PathParam("program-name") String programName,
       @PathParam("run-id") String runId) throws Exception {
+    accessEnforcer.enforce(new NamespaceId(namespaceId), authenticationContext.getPrincipal(),
+        StandardPermission.GET);
     ProgramReference programReference = null;
     try {
       RunIds.fromString(runId);