diff --git a/packages/component-manuscript-manager/src/routes/fragmentsRecommendations/patch.js b/packages/component-manuscript-manager/src/routes/fragmentsRecommendations/patch.js
index ef409bad5ca226b16471fa3d45ad47a938cbe4a9..fd1627f9c2e1cc3b4a0fe98f57e0c58416f9ad3b 100644
--- a/packages/component-manuscript-manager/src/routes/fragmentsRecommendations/patch.js
+++ b/packages/component-manuscript-manager/src/routes/fragmentsRecommendations/patch.js
@@ -21,7 +21,7 @@ module.exports = models => async (req, res) => {
     Object.assign(recommendation, req.body)
     recommendation.updatedOn = Date.now()
     await fragment.save()
-    return res.status(200).json({ recommendation })
+    return res.status(200).json(recommendation)
   } catch (e) {
     const notFoundError = await helpers.handleNotFoundError(e, 'Item')
     return res.status(notFoundError.status).json({
diff --git a/packages/xpub-faraday/config/authsome-helpers.js b/packages/xpub-faraday/config/authsome-helpers.js
index a46c4be9058a0731fdd53a7cfb07d5bee2cdf917..6150f6e8697115957125cd99fe5a77a6c8c8f784 100644
--- a/packages/xpub-faraday/config/authsome-helpers.js
+++ b/packages/xpub-faraday/config/authsome-helpers.js
@@ -39,6 +39,9 @@ const filterObjectData = (
     if (matchingCollPerm === undefined) return null
     if (['reviewer'].includes(matchingCollPerm.permission)) {
       object.files = omit(object.files, ['coverLetter'])
+      object.recommendations = object.recommendations.filter(
+        rec => rec.userId === user.id,
+      )
     }
 
     return object