diff --git a/src/api/server_server.rs b/src/api/server_server.rs
index 66174626..0923263d 100644
--- a/src/api/server_server.rs
+++ b/src/api/server_server.rs
@@ -980,6 +980,11 @@ pub async fn get_backfill_route(
         ));
     }
 
+    services()
+        .rooms
+        .event_handler
+        .acl_check(sender_servername, &body.room_id)?;
+
     let origin = services().globals.server_name().to_owned();
     let earliest_events = &[];