diff --git a/postgresql/edit_host.cgi b/postgresql/edit_host.cgi
index e0158ae08..11f6cc8bf 100755
--- a/postgresql/edit_host.cgi
+++ b/postgresql/edit_host.cgi
@@ -4,6 +4,7 @@
 
 require './postgresql-lib.pl';
 &ReadParse();
+$access{'users'} || &error($text{'host_ecannot'});
 $v = &get_postgresql_version();
 if ($in{'new'}) {
 	$type = $in{'new'};
diff --git a/postgresql/save_host.cgi b/postgresql/save_host.cgi
index 16745dafe..377aad6a1 100755
--- a/postgresql/save_host.cgi
+++ b/postgresql/save_host.cgi
@@ -4,11 +4,12 @@
 
 require './postgresql-lib.pl';
 &ReadParse();
+&error_setup($text{'host_err'});
+$access{'users'} || &error($text{'host_ecannot'});
 &lock_file($hba_conf_file);
 $v = &get_postgresql_version();
 @all = &get_hba_config($v);
 $host = $all[$in{'idx'}] if (!$in{'new'});
-&error_setup($text{'host_err'});
 
 if ($in{'delete'}) {
 	# delete one host