diff --git a/packages/server/modules/shared/authz.ts b/packages/server/modules/shared/authz.ts index 87882c3c8..ea997f004 100644 --- a/packages/server/modules/shared/authz.ts +++ b/packages/server/modules/shared/authz.ts @@ -373,7 +373,7 @@ export const streamCommentsWritePermissionsPipelineFactory = ] export const streamReadPermissionsPipelineFactory = (): AuthPipelineFunction[] => [ - validateScope({ requiredScope: Scopes.Streams.Write }), + validateScope({ requiredScope: Scopes.Streams.Read }), validateStreamPolicyAccessFactory({ policyInvoker: async ({ authData, policies }) => policies.project.canRead({