diff --git a/packages/xpub-faraday/config/authsome-mode.js b/packages/xpub-faraday/config/authsome-mode.js
index 89c0caf14801a234d20013a8d2e16ec10fdeceb6..a34f695475ad3494030506748adca880bceb2ad5 100644
--- a/packages/xpub-faraday/config/authsome-mode.js
+++ b/packages/xpub-faraday/config/authsome-mode.js
@@ -226,12 +226,12 @@ async function applyAuthenticatedUserPolicy(user, operation, object, context) {
   }
 
   if (operation === 'PATCH') {
-    if (get(object, 'type') === 'collection') {
-      return helpers.isOwner({ user, object })
+    if (get(object.current, 'type') === 'collection') {
+      return helpers.isOwner({ user, object: object.current })
     }
 
-    if (get(object, 'type') === 'fragment') {
-      return helpers.isOwner({ user, object })
+    if (get(object.current, 'type') === 'fragment') {
+      return helpers.isOwner({ user, object: object.current })
     }
 
     // allow reviewer to patch (accept/decline) his invitation
diff --git a/yarn.lock b/yarn.lock
index 378e4bc2e8eca3ede6347ab949d99f0d52fd6bce..708053b3d33e89331cac4388464f0a2cc6bfd570 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -10313,7 +10313,7 @@ promise@^7.1.1:
   dependencies:
     asap "~2.0.3"
 
-prompt@^1.0.0, "prompt@github:flatiron/prompt#1c95d1d8d333b5fbc13fa5f0619f3dcf0d514f87":
+prompt@^1.0.0, prompt@flatiron/prompt#1c95d1d8d333b5fbc13fa5f0619f3dcf0d514f87:
   version "1.0.0"
   resolved "https://codeload.github.com/flatiron/prompt/tar.gz/1c95d1d8d333b5fbc13fa5f0619f3dcf0d514f87"
   integrity sha1-jlcSPDlquYiJf7Mn/Trtw+c15P4=