diff --git a/obexd/src/manager.c b/obexd/src/manager.c
index 74834f7..3024d54 100644
--- a/obexd/src/manager.c
+++ b/obexd/src/manager.c
@@ -269,10 +269,15 @@ static DBusMessage *transfer_cancel(DBusConnection *connection,
 				DBusMessage *msg, void *user_data)
 {
 	struct obex_session *os = user_data;
+	const gchar *sender;
 
 	if (!os)
 		return invalid_args(msg);
 
+	sender = dbus_message_get_sender(msg);
+	if (strcmp(agent->bus_name, sender) != 0)
+		return not_authorized(msg);
+
 	os->cancelled = TRUE;
 
 	return dbus_message_new_method_return(msg);