diff --git a/frappe/api.py b/frappe/api.py
index 309adbc564..084bee060b 100644
--- a/frappe/api.py
+++ b/frappe/api.py
@@ -131,6 +131,7 @@ class _RESTAPIHandler:
 		doc = frappe.get_doc(self.doctype, self.name)
 		if not doc.has_permission("read"):
 			raise frappe.PermissionError
+		doc.apply_fieldlevel_read_permissions()
 		frappe.local.response.update({"data": doc})
 
 	def update_doc(self):
diff --git a/frappe/client.py b/frappe/client.py
index 4dc118ea06..b09f9168f4 100644
--- a/frappe/client.py
+++ b/frappe/client.py
@@ -86,6 +86,8 @@ def get(doctype, name=None, filters=None, parent=None):
 		doc = frappe.get_doc(doctype)  # single
 
 	doc.check_permission()
+	doc.apply_fieldlevel_read_permissions()
+
 	return doc.as_dict()