diff --git a/packages/component-helper-service/src/services/Collection.js b/packages/component-helper-service/src/services/Collection.js
index 51ab28826eec2d9b37eee43915cca6f494394df9..7fcafa9f49d7748c67da5f151d0be729e8798564 100644
--- a/packages/component-helper-service/src/services/Collection.js
+++ b/packages/component-helper-service/src/services/Collection.js
@@ -51,7 +51,7 @@ class Collection {
 
   async updateStatus({ newStatus }) {
     this.collection.status = newStatus
-    this.collection.visibleStatus = statuses[this.collection.status].public
+    this.collection.visibleStatus = statuses[this.collection.status].private
     await this.collection.save()
   }
 
diff --git a/packages/xpub-faraday/config/authsome-mode.js b/packages/xpub-faraday/config/authsome-mode.js
index 2a2aa6ad7de4d9208d04368ee81dbf0fb16ee334..0c1f7d175f3879aa2b4faaaef1155ae18a232509 100644
--- a/packages/xpub-faraday/config/authsome-mode.js
+++ b/packages/xpub-faraday/config/authsome-mode.js
@@ -119,7 +119,9 @@ async function authenticatedUser(user, operation, object, context) {
           }
 
           const collectionPermission = userPermissions.find(
-            p => p.objectId === collection.id,
+            p =>
+              p.objectId === collection.id ||
+              collection.fragments.includes(p.objectId),
           )
           if (
             publicStatusesPermissions.includes(