diff --git a/backend/dataall/modules/worksheets/services/worksheet_service.py b/backend/dataall/modules/worksheets/services/worksheet_service.py
index faf10f93b..ffea373d9 100644
--- a/backend/dataall/modules/worksheets/services/worksheet_service.py
+++ b/backend/dataall/modules/worksheets/services/worksheet_service.py
@@ -132,6 +132,7 @@ def delete_worksheet(uri) -> bool:
     @staticmethod
     @TenantPolicyService.has_tenant_permission(MANAGE_WORKSHEETS)
     @ResourcePolicyService.has_resource_permission(RUN_ATHENA_QUERY)
+    @ResourcePolicyService.has_resource_permission(GET_WORKSHEET, param_name='worksheetUri')
     def run_sql_query(uri, worksheetUri, sqlQuery):
         with get_context().db_engine.scoped_session() as session:
             environment = EnvironmentService.get_environment_by_uri(session, uri)