diff --git a/packages/middleware/CHANGELOG.json b/packages/middleware/CHANGELOG.json
index 1ce839b798..824358cdd7 100644
--- a/packages/middleware/CHANGELOG.json
+++ b/packages/middleware/CHANGELOG.json
@@ -1,6 +1,18 @@
 {
   "name": "@hcengineering/middleware",
   "entries": [
+    {
+      "version": "0.7.19",
+      "tag": "@hcengineering/middleware_v0.7.19",
+      "date": "Fri, 07 Nov 2025 16:12:16 GMT",
+      "comments": {
+        "patch": [
+          {
+            "comment": "Fix permission middleware"
+          }
+        ]
+      }
+    },
     {
       "version": "0.7.18",
       "tag": "@hcengineering/middleware_v0.7.18",
diff --git a/packages/middleware/CHANGELOG.md b/packages/middleware/CHANGELOG.md
index e2a35d1fcf..429015f32e 100644
--- a/packages/middleware/CHANGELOG.md
+++ b/packages/middleware/CHANGELOG.md
@@ -1,6 +1,13 @@
 # Change Log - @hcengineering/middleware
 
-This log was last generated on Thu, 06 Nov 2025 10:21:28 GMT and should not be manually modified.
+This log was last generated on Fri, 07 Nov 2025 16:12:16 GMT and should not be manually modified.
+
+## 0.7.19
+Fri, 07 Nov 2025 16:12:16 GMT
+
+### Patches
+
+- Fix permission middleware
 
 ## 0.7.18
 Thu, 06 Nov 2025 10:21:28 GMT
diff --git a/packages/middleware/package.json b/packages/middleware/package.json
index cbb5351b48..7b5eb00699 100644
--- a/packages/middleware/package.json
+++ b/packages/middleware/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@hcengineering/middleware",
-  "version": "0.7.18",
+  "version": "0.7.19",
   "main": "lib/index.js",
   "svelte": "src/index.ts",
   "types": "types/index.d.ts",
diff --git a/packages/middleware/src/spacePermissions.ts b/packages/middleware/src/spacePermissions.ts
index b6fd726b84..b570c8aca7 100644
--- a/packages/middleware/src/spacePermissions.ts
+++ b/packages/middleware/src/spacePermissions.ts
@@ -163,7 +163,7 @@ export class SpacePermissionsMiddleware extends BaseMiddleware implements Middle
     let withoutMatch: Permission | undefined = undefined
     for (const permission of permissions) {
       if (permission.txClass === undefined || permission.txClass !== tx._class) continue
-      if (permission.objectClass !== undefined && this.context.hierarchy.isDerived(tx.objectClass, permission.objectClass)) continue
+      if (permission.objectClass !== undefined && !this.context.hierarchy.isDerived(tx.objectClass, permission.objectClass)) continue
       if (permission.txMatch === undefined) {
         withoutMatch = permission
         continue