diff -r 1910d86afcbc -r 9eb810333b0f hooks/security.py
--- a/hooks/security.py	Tue Jan 21 14:56:06 2014 +0100
+++ b/hooks/security.py	Wed Feb 12 18:15:32 2014 +0100
@@ -41,7 +41,7 @@
     for attr in editedattrs:
         if attr in dontcheck:
             continue
-        rdef = eschema.rdef(attr)
+        rdef = eschema.rdef(attr, takefirst=True)
         if rdef.final: # non final relation are checked by standard hooks
             # attributes only have a specific 'update' permission
             updateperm = rdef.permissions.get('update')