diff --git a/apps/assets/api/accounts.py b/apps/assets/api/accounts.py
index fcdcce8d7..0a3fe3dfa 100644
--- a/apps/assets/api/accounts.py
+++ b/apps/assets/api/accounts.py
@@ -88,8 +88,8 @@ class AccountSecretsViewSet(AccountViewSet):
     http_method_names = ['get']
     permission_classes = [RBACPermission, NeedMFAVerify]
     rbac_perms = {
-        'list': 'assets.view_assetsecret',
-        'retrieve': 'assets.view_assetsecret',
+        'list': 'assets.view_assetaccountsecret',
+        'retrieve': 'assets.view_assetaccountsecret',
     }