diff --git a/api/src/utils/merge-permissions-for-share.ts b/api/src/utils/merge-permissions-for-share.ts index 4ff9381146..6c9504f80e 100644 --- a/api/src/utils/merge-permissions-for-share.ts +++ b/api/src/utils/merge-permissions-for-share.ts @@ -64,7 +64,9 @@ export function mergePermissionsForShare( } // Explicitly filter out permissions to collections unrelated to the root parent item. - const limitedPermissions = currentPermissions.filter(({ collection }) => allowedCollections.includes(collection)); + const limitedPermissions = currentPermissions.filter( + ({ action, collection }) => allowedCollections.includes(collection) && action === 'read' + ); return mergePermissions('and', limitedPermissions, generatedPermissions); }