diff --git a/src/metabase/models/common.clj b/src/metabase/models/common.clj
index 20b34c06ecf8e53469fe2a23f4feea67a6339fb9..93c47e80a33ba6820887bfdcb37d52c2c997bf8c 100644
--- a/src/metabase/models/common.clj
+++ b/src/metabase/models/common.clj
@@ -44,7 +44,7 @@
          public_perms    500 "Can't check user permissions: object doesn't have :public_perms.")
   (cond (:is_superuser *current-user*)   #{:read :write}    ; superusers have full access to everything
         (= creator_id *current-user-id*) #{:read :write}    ; if user created OBJ they have all permissions
-        (>= perms-read public_perms)     #{:read}           ; if the object is public then everyone gets :read
+        (<= perms-read public_perms)     #{:read}           ; if the object is public then everyone gets :read
         :else                            #{}))              ; default is user has no permissions a.k.a private
 
 (defn user-can?