# Restoring of access rights

**URL:** <https://forum.solidproject.org/t/restoring-of-access-rights/935>\
**Category:** Instructions\
**Created:** [December 27, 2018, 2:19am UTC](https://forum.solidproject.org/t/restoring-of-access-rights/935 "2018-12-27T02:19:50Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Nmaltsev](https://avatars.discourse-cdn.com/v4/letter/n/7c8e57/32.png) [@Nmaltsev](https://forum.solidproject.org/u/Nmaltsev)\
**Post date:** [December 27, 2018, 2:19am UTC](https://forum.solidproject.org/t/restoring-of-access-rights/935/1 "2018-12-27T02:19:50Z")

</div>

Does anybody know how user can restore his access rights after they were granted to another person?  
It sounds strange. Imagine such situation - one malicious application received access to the user’s POD and modify all access rights of folder (root folder) to another webId. After that the owner can not restore his access rights to the POD folder.  
It look likes a weakness because the Control access rights does not guaranted to the POD’s owner.  
I have prepared screencast of that incedent `https://youtu.be/Um1xkr0bmt8`.

---

<div class="post-metadata">

**Author:** ![jgarrigu](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/jgarrigu/32/84_2.png) [@jgarrigu](https://forum.solidproject.org/u/jgarrigu)\
**Post date:** [December 27, 2018, 5:35pm UTC](https://forum.solidproject.org/t/restoring-of-access-rights/935/2 "2018-12-27T17:35:37Z")

</div>

I have a similar concern.  
Owner should not be changeable by an app.