nodejs
diff --git a/‎src/node_binding.cc‎
Lines changed: 3 additions & 0 deletions b/‎src/node_binding.cc‎
Lines changed: 3 additions & 0 deletions
diff --git a/‎test/parallel/test-permission-linked-binding-drop.js‎
Lines changed: 19 additions & 0 deletions b/‎test/parallel/test-permission-linked-binding-drop.js‎
Lines changed: 19 additions & 0 deletions
diff --git a/‎test/parallel/test-permission-linked-binding.js‎
Lines changed: 15 additions & 0 deletions b/‎test/parallel/test-permission-linked-binding.js‎
Lines changed: 15 additions & 0 deletions
@@ -671,6 +671,9 @@ void GetLinkedBinding(const FunctionCallbackInfo<Value>& args) {
 
   node::Utf8Value module_name_v(env->isolate(), module_name);
   const char* name = *module_name_v;
+  THROW_IF_INSUFFICIENT_PERMISSIONS(
+      env, permission::PermissionScope::kAddon, module_name_v.ToStringView());
+
   node_module* mod = nullptr;
 
   // Iterate from here to the nearest non-Worker Environment to see if there's
 
@@ -0,0 +1,19 @@
+// Flags: --permission --allow-addons --allow-fs-read=*
+'use strict';
+
+const common = require('../common');
+const assert = require('node:assert');
+
+assert.strictEqual(process.permission.has('addon'), true);
+
+process.permission.drop('addon');
+
+assert.strictEqual(process.permission.has('addon'), false);
+
+assert.throws(() => {
+  process._linkedBinding('missing');
+}, common.expectsError({
+  code: 'ERR_ACCESS_DENIED',
+  permission: 'Addon',
+  resource: 'missing',
+}));
@@ -0,0 +1,15 @@
+// Flags: --permission --allow-fs-read=*
+'use strict';
+
+const common = require('../common');
+const assert = require('node:assert');
+
+assert.strictEqual(process.permission.has('addon'), false);
+
+assert.throws(() => {
+  process._linkedBinding('missing');
+}, common.expectsError({
+  code: 'ERR_ACCESS_DENIED',
+  permission: 'Addon',
+  resource: 'missing',
+}));