diff --git a/src/plugin/web/src/main/java/org/geoserver/acl/plugin/web/components/AbstractRulesModel.java b/src/plugin/web/src/main/java/org/geoserver/acl/plugin/web/components/AbstractRulesModel.java
index 832272b..811faf0 100644
--- a/src/plugin/web/src/main/java/org/geoserver/acl/plugin/web/components/AbstractRulesModel.java
+++ b/src/plugin/web/src/main/java/org/geoserver/acl/plugin/web/components/AbstractRulesModel.java
@@ -288,7 +288,7 @@ protected static AccessManagerConfigProvider configProvider() {
         return context.getBean(AccessManagerConfigProvider.class);
     }
 
-    protected static Map<String, List<String>> KNOWN_SERVICES =
+    protected static final Map<String, List<String>> KNOWN_SERVICES =
             Map.of(
                     "WMS",
                     List.of(
@@ -305,7 +305,16 @@ protected static AccessManagerConfigProvider configProvider() {
                             "DescribeFeatureType",
                             "LockFeature",
                             "GetFeatureWithLock",
-                            "Transaction"),
+                            "Transaction",
+                            // WFS 1.1 additional operations:
+                            "GetGMLObject",
+                            // WFS 2.0 additional operations:
+                            "GetPropertyValue",
+                            "GetFeatureWithLock",
+                            "CreateStoredQuery",
+                            "DropStoredQuery",
+                            "ListStoredQueries",
+                            "DescribeStoredQueries"),
                     "WCS",
                     List.of("GetCapabilities", "GetCoverage", "DescribeCoverage"),
                     "WPS",