diff --git a/api/src/services/utils.ts b/api/src/services/utils.ts index 18f4faf23a..a6199dfaf6 100644 --- a/api/src/services/utils.ts +++ b/api/src/services/utils.ts @@ -29,7 +29,15 @@ export default class UtilsService { } if (this.accountability?.admin !== true) { - const permissions = await this.knex.select('fields').from('directus_permissions').where({ role: this.accountability?.role || null, collection }).first(); + const permissions = await this.knex + .select('fields') + .from('directus_permissions') + .where({ + collection, + operation: 'update', + role: this.accountability?.role || null, + }) + .first(); if (!permissions) { throw new ForbiddenException();