diff --git a/cinder/tests/unit/policy.json b/cinder/tests/unit/policy.json
index c7e86ff5b42..8c257c36a90 100644
--- a/cinder/tests/unit/policy.json
+++ b/cinder/tests/unit/policy.json
@@ -85,6 +85,7 @@
     "volume:create_transfer": "",
     "volume:accept_transfer": "",
     "volume:delete_transfer": "",
+    "volume:get_transfer": "",
     "volume:get_all_transfers": "",
 
     "backup:create" : "",
diff --git a/cinder/transfer/api.py b/cinder/transfer/api.py
index 20b90cdcc28..cf5df59fd24 100644
--- a/cinder/transfer/api.py
+++ b/cinder/transfer/api.py
@@ -57,6 +57,7 @@ class API(base.Base):
         super(API, self).__init__(db_driver)
 
     def get(self, context, transfer_id):
+        volume_api.check_policy(context, 'get_transfer')
         rv = self.db.transfer_get(context, transfer_id)
         return dict(rv)
 
diff --git a/etc/cinder/policy.json b/etc/cinder/policy.json
index 474a25889ea..88fa429c50b 100644
--- a/etc/cinder/policy.json
+++ b/etc/cinder/policy.json
@@ -72,6 +72,7 @@
     "volume:create_transfer": "rule:admin_or_owner",
     "volume:accept_transfer": "",
     "volume:delete_transfer": "rule:admin_or_owner",
+    "volume:get_transfer": "rule:admin_or_owner",
     "volume:get_all_transfers": "rule:admin_or_owner",
 
     "volume_extension:replication:promote": "rule:admin_api",