Fix permission middleware

Signed-off-by: Denis Bykhov <bykhov.denis@gmail.com>

packages/middleware/CHANGELOG.json

@@ -1,6 +1,18 @@
 {
   "name": "@hcengineering/middleware",
   "entries": [
+    {
+      "version": "0.7.19",
+      "tag": "@hcengineering/middleware_v0.7.19",
+      "date": "Fri, 07 Nov 2025 16:12:16 GMT",
+      "comments": {
+        "patch": [
+          {
+            "comment": "Fix permission middleware"
+          }
+        ]
+      }
+    },
     {
       "version": "0.7.18",
       "tag": "@hcengineering/middleware_v0.7.18",

packages/middleware/CHANGELOG.md

@@ -1,6 +1,13 @@
 # Change Log - @hcengineering/middleware
 
-This log was last generated on Thu, 06 Nov 2025 10:21:28 GMT and should not be manually modified.
+This log was last generated on Fri, 07 Nov 2025 16:12:16 GMT and should not be manually modified.
+
+## 0.7.19
+Fri, 07 Nov 2025 16:12:16 GMT
+
+### Patches
+
+- Fix permission middleware
 
 ## 0.7.18
 Thu, 06 Nov 2025 10:21:28 GMT

packages/middleware/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hcengineering/middleware",
-  "version": "0.7.18",
+  "version": "0.7.19",
   "main": "lib/index.js",
   "svelte": "src/index.ts",
   "types": "types/index.d.ts",

packages/middleware/src/spacePermissions.ts

@@ -163,7 +163,7 @@ export class SpacePermissionsMiddleware extends BaseMiddleware implements Middle
     let withoutMatch: Permission | undefined = undefined
     for (const permission of permissions) {
       if (permission.txClass === undefined || permission.txClass !== tx._class) continue
-      if (permission.objectClass !== undefined && this.context.hierarchy.isDerived(tx.objectClass, permission.objectClass)) continue
+      if (permission.objectClass !== undefined && !this.context.hierarchy.isDerived(tx.objectClass, permission.objectClass)) continue
       if (permission.txMatch === undefined) {
         withoutMatch = permission
         continue