diff --git a/src/Controllers/DatabaseController.js b/src/Controllers/DatabaseController.js
index 9e810508..9308cb42 100644
--- a/src/Controllers/DatabaseController.js
+++ b/src/Controllers/DatabaseController.js
@@ -1439,7 +1439,7 @@ class DatabaseController {
     [...(auth.userRoles || [])].forEach(role => {
       const fields = protectedFields[role];
       if (fields) {
-        protectedKeys = protectedKeys.filter(fields.includes);
+        protectedKeys = protectedKeys.filter(v => fields.includes(v));
       }
     });