diff --git a/qrexec/policy/parser.py b/qrexec/policy/parser.py
index 8013edb2..15970df1 100644
--- a/qrexec/policy/parser.py
+++ b/qrexec/policy/parser.py
@@ -1013,6 +1013,17 @@ def evaluate(self, request: Request) -> AllowResolution:
         elif target == "@adminvm":
             target = "dom0"
 
+        available_targets = list(
+            self.rule.policy.collect_targets_for_ask(request)
+        )
+        if target not in available_targets:
+            raise AccessDenied(
+                "policy define 'allow' action at {}:{} but target {} was "
+                "denied in a previous rule".format(
+                    self.rule.filepath, self.rule.lineno, target
+                )
+            )
+
         if not self.autostart and not self.allow_no_autostart(
             target, request.system_info
         ):
@@ -1076,12 +1087,20 @@ def evaluate(self, request: Request) -> AskResolution:
         assert self.rule.is_match(request)
 
         targets_for_ask: Iterable[str]
+        available_targets = list(
+            self.rule.policy.collect_targets_for_ask(request)
+        )
         if self.target is not None:
+            if self.target not in available_targets:
+                raise AccessDenied(
+                    "policy define 'ask' action at {}:{} but target {} was "
+                    "denied in a previous rule".format(
+                        self.rule.filepath, self.rule.lineno, self.target
+                    )
+                )
             targets_for_ask = [self.target]
         else:
-            targets_for_ask = list(
-                self.rule.policy.collect_targets_for_ask(request)
-            )
+            targets_for_ask = available_targets
 
         if not self.autostart:
             targets_for_ask = [
diff --git a/qrexec/tests/policy_parser.py b/qrexec/tests/policy_parser.py
index e0e9a112..3f2283d6 100644
--- a/qrexec/tests/policy_parser.py
+++ b/qrexec/tests/policy_parser.py
@@ -1177,6 +1177,10 @@ def test_020_collect_targets_for_ask(self):
             * * test-vm1 @anyvm ask
             * * test-vm2 @tag:tag1 deny
             * * test-vm2 @tag:tag2 allow
+            * * test-vm3 @tag:tag1 deny
+            * * test-vm3 @tag:tag1 allow target=test-vm1
+            * * test-vm3 @tag:tag2 deny
+            * * test-vm3 @tag:tag2 ask default_target=test-vm2 target=test-vm2
             * * test-no-dvm @type:AppVM deny
             * * @type:AppVM @default allow target=test-vm3
             * * @tag:tag1 @type:AppVM allow
@@ -1207,6 +1211,12 @@ def test_020_collect_targets_for_ask(self):
         self.assertCountEqual(
             policy.collect_targets_for_ask(_req("test-vm3", "@default")), []
         )
+        self.assertCountEqual(
+            policy.collect_targets_for_ask(_req("test-vm3", "test-vm1")), [],
+        )
+        self.assertCountEqual(
+            policy.collect_targets_for_ask(_req("test-vm3", "test-vm2")), [],
+        )
         self.assertCountEqual(
             policy.collect_targets_for_ask(_req("test-standalone", "@default")),
             [