diff --git a/core/src/main/java/io/kestra/plugin/core/flow/Pause.java b/core/src/main/java/io/kestra/plugin/core/flow/Pause.java
index 4b667ed567..426ea36f47 100644
--- a/core/src/main/java/io/kestra/plugin/core/flow/Pause.java
+++ b/core/src/main/java/io/kestra/plugin/core/flow/Pause.java
@@ -185,7 +185,7 @@ public class Pause extends Task implements FlowableTask<Pause.Output> {
     )
     @NotNull
     @Builder.Default
-    private Property<Behavior> behavior = Property.ofValue(Behavior.RESUME);
+    protected Property<Behavior> behavior = Property.ofValue(Behavior.RESUME);
 
     @Valid
     @Schema(
diff --git a/webserver/src/main/java/io/kestra/webserver/controllers/api/ExecutionController.java b/webserver/src/main/java/io/kestra/webserver/controllers/api/ExecutionController.java
index 9bcd1f473a..38f734dea7 100644
--- a/webserver/src/main/java/io/kestra/webserver/controllers/api/ExecutionController.java
+++ b/webserver/src/main/java/io/kestra/webserver/controllers/api/ExecutionController.java
@@ -1353,6 +1353,10 @@ public class ExecutionController {
 
         var execution = maybeExecution.get();
 
+        return killExecution(execution, isOnKillCascade);
+    }
+
+    protected MutableHttpResponse<Object> killExecution(Execution execution, Boolean isOnKillCascade) throws QueueException {
         // Always emit an EXECUTION_KILLED event when isOnKillCascade=true.
         if (execution.getState().isTerminated() && !isOnKillCascade) {
             throw new IllegalStateException("Execution is already finished, can't kill it");
@@ -1362,7 +1366,7 @@ public class ExecutionController {
         killQueue.emit(ExecutionKilledExecution
             .builder()
             .state(ExecutionKilled.State.REQUESTED)
-            .executionId(executionId)
+            .executionId(execution.getId())
             .isOnKillCascade(isOnKillCascade)
             .tenantId(tenantService.resolveTenant())
             .build()
@@ -1400,6 +1404,14 @@ public class ExecutionController {
                     "execution",
                     executionId
                 ));
+            } else if (!validateExecutionACL(execution.get())) {
+                invalids.add(ManualConstraintViolation.of(
+                    "user don't have the authorisation to kill this execution",
+                    executionId,
+                    String.class,
+                    "execution",
+                    executionId
+                ));
             } else {
                 executions.add(execution.get());
             }
@@ -1550,6 +1562,14 @@ public class ExecutionController {
                     "execution",
                     executionId
                 ));
+            } else if (!validateExecutionACL(execution.get())) {
+                invalids.add(ManualConstraintViolation.of(
+                    "user don't have the authorisation to resume this execution",
+                    executionId,
+                    String.class,
+                    "execution",
+                    executionId
+                ));
             } else {
                 executions.add(execution.get());
             }
@@ -2299,6 +2319,14 @@ public class ExecutionController {
                     "execution",
                     executionId
                 ));
+            } else if (!validateExecutionACL(execution.get())) {
+                invalids.add(ManualConstraintViolation.of(
+                    "user don't have the authorisation to force run this execution",
+                    executionId,
+                    String.class,
+                    "execution",
+                    executionId
+                ));
             } else {
                 executions.add(execution.get());
             }
@@ -2589,4 +2617,13 @@ public class ExecutionController {
         }
     }
 
+    /**
+     * For override purpose.
+     * @param execution
+     * @return true if the user has the authorization, false else.
+     */
+    protected boolean validateExecutionACL(Execution execution) {
+        return true;
+    }
+
 }
diff --git a/webserver/src/test/java/io/kestra/webserver/controllers/api/ExecutionControllerRunnerTest.java b/webserver/src/test/java/io/kestra/webserver/controllers/api/ExecutionControllerRunnerTest.java
index e7a7ff1e73..4de7ec49c2 100644
--- a/webserver/src/test/java/io/kestra/webserver/controllers/api/ExecutionControllerRunnerTest.java
+++ b/webserver/src/test/java/io/kestra/webserver/controllers/api/ExecutionControllerRunnerTest.java
@@ -970,7 +970,7 @@ class ExecutionControllerRunnerTest {
     @Test
     @LoadFlows({"flows/valids/pause-test.yaml"})
     @SuppressWarnings("unchecked")
-    void resumeExecutionPaused() throws TimeoutException, InterruptedException, QueueException, InternalException {
+    void resumeExecutionPaused() throws TimeoutException, QueueException {
         // Run execution until it is paused
         Execution pausedExecution = runnerUtils.runOneUntilPaused(TENANT_ID, TESTS_FLOW_NS, "pause-test");
         assertThat(pausedExecution.getState().isPaused()).isTrue();
@@ -988,7 +988,7 @@ class ExecutionControllerRunnerTest {
     @Test
     @LoadFlows({"flows/valids/resume-validate.yaml"})
     @SuppressWarnings("unchecked")
-    void resumeValidateExecutionPaused() throws TimeoutException, InterruptedException, QueueException, InternalException {
+    void resumeValidateExecutionPaused() throws TimeoutException, QueueException {
         // Run execution until it is paused
         Execution pausedExecution = runnerUtils.runOneUntilPaused(TENANT_ID, TESTS_FLOW_NS, "resume-validate");
         assertThat(pausedExecution.getState().isPaused()).isTrue();
@@ -1011,7 +1011,7 @@ class ExecutionControllerRunnerTest {
     @SuppressWarnings("unchecked")
     @Test
     @LoadFlows({"flows/valids/pause_on_resume.yaml"})
-    void resumeExecutionPausedWithInputs() throws TimeoutException, InterruptedException, QueueException {
+    void resumeExecutionPausedWithInputs() throws TimeoutException, QueueException {
         // Run execution until it is paused
         Execution pausedExecution = runnerUtils.runOneUntilPaused(TENANT_ID, TESTS_FLOW_NS, "pause_on_resume");
         assertThat(pausedExecution.getState().isPaused()).isTrue();