diff --git a/src/zabapgit_forms.prog.abap b/src/zabapgit_forms.prog.abap
index 2adf3121f..205840624 100644
--- a/src/zabapgit_forms.prog.abap
+++ b/src/zabapgit_forms.prog.abap
@@ -8,6 +8,10 @@ FORM run.
   DATA lx_not_found TYPE REF TO zcx_abapgit_not_found.
 
   TRY.
+      IF zcl_abapgit_auth=>is_allowed( zif_abapgit_auth=>c_authorization-startup ) = abap_false.
+        zcx_abapgit_exception=>raise( 'No authorization to start abapGit' ).
+      ENDIF.
+
       zcl_abapgit_migrations=>run( ).
       PERFORM open_gui.
     CATCH zcx_abapgit_exception INTO lx_exception.
diff --git a/src/zif_abapgit_auth.intf.abap b/src/zif_abapgit_auth.intf.abap
index 628b85a0b..de7ea87df 100644
--- a/src/zif_abapgit_auth.intf.abap
+++ b/src/zif_abapgit_auth.intf.abap
@@ -3,6 +3,7 @@ INTERFACE zif_abapgit_auth PUBLIC.
   TYPES: ty_authorization TYPE string.
 
   CONSTANTS: BEGIN OF c_authorization,
+               startup               TYPE ty_authorization VALUE 'STARTUP',
                uninstall             TYPE ty_authorization VALUE 'UNINSTALL',
                create_repo           TYPE ty_authorization VALUE 'CREATE_REPO',
                transport_to_branch   TYPE ty_authorization VALUE 'TRANSPORT_TO_BRANCH',