diff --git a/v1/list/permissions.py b/v1/list/permissions.py
index e9d2ad8..52b22b6 100644
--- a/v1/list/permissions.py
+++ b/v1/list/permissions.py
@@ -32,4 +32,4 @@ def has_object_permission(self, request, view, obj):
 
         # Write/Read permissions are only allowed to the owner of the list.
         return obj.list.author == request.user or \
-               obj.list.groceryshared.shared_to == request.user
+               obj.list.groceryshared_set.filter(shared_by=obj.list.author.pk, shared_to=request.user.pk).exists()