diff --git a/beat/web/experiments/permissions.py b/beat/web/experiments/permissions.py
index 40133b879cca88f6fdc67ef17db5802dad07917d..bbc04aa6549ac0f773b411991108512f115b89af 100644
--- a/beat/web/experiments/permissions.py
+++ b/beat/web/experiments/permissions.py
@@ -37,6 +37,6 @@ class IsDatabaseAccessible(permissions.BasePermission):
 
     def has_object_permission(self, request, view, obj):
         accessible_databases = Database.objects.for_user(request.user, True)
-        experiment_databases = Database.objects.filter(protocols__sets=obj.referenced_datasets.all()).distinct()
+        experiment_databases = Database.objects.filter(protocols__sets__in=obj.referenced_datasets.all()).distinct()
 
         return all(experiment_db in accessible_databases for experiment_db in experiment_databases)