diff --git a/backend/src/Datarekisteri/Backend.hs b/backend/src/Datarekisteri/Backend.hs
index 0ff2f3e..b5e2d48 100644
--- a/backend/src/Datarekisteri/Backend.hs
+++ b/backend/src/Datarekisteri/Backend.hs
@@ -214,7 +214,9 @@ instance MonadRandom APIM where
 
 instance MonadPermissions APIM where
     currentPermissions = asks statePermissions
-    defaultPermissions = pure $ Permissions $ fromList [(OwnProfile, ReadWrite)]
+    defaultPermissions =
+        maybe mempty (\user -> Permissions $ fromList [(Profile user, ReadWrite)]) <$>
+            asks stateCurrentUser
 
 runAPIM :: Config -> APIM a -> IO a
 runAPIM config (APIM m) = runReaderT m RequestState