diff --git a/packages/server/src/api/routes/record.js b/packages/server/src/api/routes/record.js
index 35c1b55f3c..b3b5e9ed56 100644
--- a/packages/server/src/api/routes/record.js
+++ b/packages/server/src/api/routes/record.js
@@ -36,7 +36,7 @@ router
   )
   .post(
     "/api/:modelId/records/validate",
-    authorized(WRITE_MODEL),
+    authorized(WRITE_MODEL, ctx => ctx.params.modelId),
     recordController.validate
   )
   .delete(