diff --git a/invenio_records_marc21/services/permissions.py b/invenio_records_marc21/services/permissions.py
index d57f2053..28f405c1 100644
--- a/invenio_records_marc21/services/permissions.py
+++ b/invenio_records_marc21/services/permissions.py
@@ -77,7 +77,7 @@ class Marc21RecordPermissionPolicy(RecordPermissionPolicy):
     can_manage_files = can_curate
 
     can_read_files = [
-        IfRestricted("files", then_=can_view, else_=can_all),
+        IfRestricted("files", then_=can_curate, else_=can_all),
     ]
     can_get_content_files = [
         IfFileIsLocal(then_=can_read_files, else_=[SystemProcess()])