diff --git a/Xext/xres.c b/Xext/xres.c
index b5d8ee826..4ebd8fafe 100644
--- a/Xext/xres.c
+++ b/Xext/xres.c
@@ -308,7 +308,9 @@ ProcXResQueryClientResources(ClientPtr client)
 
     clientID = CLIENT_ID(stuff->xid);
 
-    if ((clientID >= currentMaxClients) || !clients[clientID]) {
+    if ((clientID >= currentMaxClients) || !clients[clientID] ||
+        (XaceHookClientAccess(client, clients[clientID], DixReadAccess)
+                              != Success)) {
         client->errorValue = stuff->xid;
         return BadValue;
     }