diff --git a/core/src/main/java/com/sk89q/worldedit/extension/factory/DefaultBlockParser.java b/core/src/main/java/com/sk89q/worldedit/extension/factory/DefaultBlockParser.java
index f0195beb..5b9a5df4 100644
--- a/core/src/main/java/com/sk89q/worldedit/extension/factory/DefaultBlockParser.java
+++ b/core/src/main/java/com/sk89q/worldedit/extension/factory/DefaultBlockParser.java
@@ -322,6 +322,9 @@ public class DefaultBlockParser extends InputParser<BaseBlock> {
             try {
                 CompoundTag nbt = JSON2NBT.getTagFromJson(joined);
                 if (nbt != null) {
+                    if (context.isRestricted() && actor != null && !actor.hasPermission("worldedit.anyblock")) {
+                        throw new DisallowedUsageException("You are not allowed to nbt'");
+                    }
                     return new BaseBlock(blockId, data, nbt);
                 }
             } catch (NBTException e) {