diff --git a/metadata/hasura.go b/metadata/hasura.go
index 86119e29..7e576ebf 100644
--- a/metadata/hasura.go
+++ b/metadata/hasura.go
@@ -21,7 +21,7 @@ func parseGraphqlError(err error) *controller.APIError {
 			return controller.InternalServerError(err)
 		}
 		switch code {
-		case "access-denied", "validation-failed":
+		case "access-denied", "validation-failed", "permission-error":
 			return controller.ForbiddenError(ghErr, "you are not authorized")
 		case "data-exception", "constraint-violation":
 			return controller.BadDataError(err, ghErr.Error())