diff --git a/packages/backend/src/services/auth/PermissionService.js b/packages/backend/src/services/auth/PermissionService.js index 692d4a8c..0819050e 100644 --- a/packages/backend/src/services/auth/PermissionService.js +++ b/packages/backend/src/services/auth/PermissionService.js @@ -207,7 +207,7 @@ class PermissionService extends BaseService { if ( actor.type instanceof AccessTokenActorType ) { // Authorizer must have permission - const authorizer_permission = await this.check(authorizer, permission); + const authorizer_permission = await this.check(actor.type.authorizer, permission); if ( ! authorizer_permission ) return false; return await this.check_access_token_permission(