diff --git a/backend/src/middleware/permissionsMiddleware.js b/backend/src/middleware/permissionsMiddleware.js index ce98090ad..e8816d2df 100644 --- a/backend/src/middleware/permissionsMiddleware.js +++ b/backend/src/middleware/permissionsMiddleware.js @@ -172,7 +172,7 @@ const permissions = shield( markAsRead: isAuthenticated, }, User: { - email: isMyOwn, + email: or(isMyOwn, isAdmin), }, }, {