diff --git a/app/controllers/api/zotero_controller.rb b/app/controllers/api/zotero_controller.rb
index <HASH>..<HASH> 100644
--- a/app/controllers/api/zotero_controller.rb
+++ b/app/controllers/api/zotero_controller.rb
@@ -34,7 +34,7 @@ module API
     private
 
       def authorize_user!
-        authorize! :create, ::GenericWork
+        authorize! :create, Sufia.primary_work_type
       rescue CanCan::AccessDenied
         return redirect_to root_url, alert: 'You are not authorized to perform this operation'
       end
Don't hardcode GenericWork into ZoteroController