diff --git a/restws.entity.inc b/restws.entity.inc
index 2cdc281..e55fd53 100644
--- a/restws.entity.inc
+++ b/restws.entity.inc
@@ -234,6 +234,10 @@ class RestWSEntityResourceController implements RestWSQueryResourceControllerInt
     $offset *= $limit;
     $query->range($offset, $limit);
 
+    // Add node_access, so that at least the node permission are respected.
+    // todo: find a solution for all entities.
+    $query->addTag('node_access');
+
     // Catch any errors, like wrong keywords or properties.
     try {
       $query_result = $query->execute();
@@ -259,6 +263,7 @@ class RestWSEntityResourceController implements RestWSQueryResourceControllerInt
     foreach ($filters as $filter => $value) {
       $this->propertyQueryOperation($query, 'Condition', $filter, $value);
     }
+    $query->addTag('node_access');
     $query->count();
 
     return $query->execute();