diff --git a/flaschengeist/controller/sessionController.py b/flaschengeist/controller/sessionController.py
index 61ce3a4..7d5e3e8 100644
--- a/flaschengeist/controller/sessionController.py
+++ b/flaschengeist/controller/sessionController.py
@@ -28,7 +28,7 @@ def validate_token(token, user_agent, permissions):
         if session.expires >= datetime.now(timezone.utc) and (
             session.browser == user_agent.browser and session.platform == user_agent.platform
         ):
-            if not permissions or session._user.has_permissions(permissions):
+            if not permissions or session._user.has_permission(permissions):
                 session.refresh()
                 db.session.commit()
                 return session