diff -r 1acd90d0cb59 -r ede247bbbf62 hooks/security.py
--- a/hooks/security.py	Mon Feb 15 15:05:15 2010 +0100
+++ b/hooks/security.py	Mon Feb 15 15:10:25 2010 +0100
@@ -28,7 +28,7 @@
         rdef = eschema.rdef(attr)
         if rdef.final: # non final relation are checked by other hooks
             # add/delete should be equivalent (XXX: unify them into 'update' ?)
-            rdef.check_perm(session, 'add', eid=eid)
+            rdef.check_perm(session, 'update', eid=eid)
 
 
 class _CheckEntityPermissionOp(hook.LateOperation):