diff --git a/core/graphene/mutations.py b/core/graphene/mutations.py
index a75211da..dca6bda3 100644
--- a/core/graphene/mutations.py
+++ b/core/graphene/mutations.py
@@ -299,10 +299,7 @@ class BulkWishlistAction(BaseMutation):
             raise BadRequest(_("please provide wishlist_uuid value"))
         user = info.context.user
         try:
-            wishlist = Wishlist.objects.get(uuid=wishlist_uuid)
-
-            if user != wishlist.user or not user.has_perm("core.change_wishlist"):
-                raise PermissionDenied(permission_denied_message)
+            wishlist = Wishlist.objects.get(user=user, uuid=wishlist_uuid)
 
             # noinspection PyUnreachableCode
             match action: