diff --git a/JsonApi/Request/ParamEntityFinder.php b/JsonApi/Request/ParamEntityFinder.php
index <HASH>..<HASH> 100644
--- a/JsonApi/Request/ParamEntityFinder.php
+++ b/JsonApi/Request/ParamEntityFinder.php
@@ -73,7 +73,7 @@ class ParamEntityFinder
 
             $access = self::$actionToAccess[$params->action->name];
 
-            if ($this->securityContext->isGranted($access, $entity)) {
+            if (!$this->securityContext->isGranted($access, $entity)) {
                 throw new EntityAccessDeniedException(
                     self::ERROR_ACCESS_DENIED
                 );
Same mistake twice - Trix are for kids after all.