1 files changed, 3 insertions, 3 deletions
diff --git a/app/policies/vehicle_journey_policy.rb b/app/policies/vehicle_journey_policy.rb
index 7aa19f1a2..785c2bb1f 100644
--- a/app/policies/vehicle_journey_policy.rb
+++ b/app/policies/vehicle_journey_policy.rb
@@ -6,15 +6,15 @@ class VehicleJourneyPolicy < ApplicationPolicy
   end
 
   def create?
-    user.has_permission?('vehicle_journeys.create')
+    user.has_permission?('vehicle_journeys.create') # organisation match via referential is checked in the view
   end
 
   def edit?
-    user.has_permission?('vehicle_journeys.edit')
+    organisation_match?(via_referential: true) && user.has_permission?('vehicle_journeys.edit')
   end
 
   def destroy?
-    user.has_permission?('vehicle_journeys.destroy')
+    organisation_match?(via_referential: true) && user.has_permission?('vehicle_journeys.destroy')
   end
 
   def update?  ; edit? end