diff --git a/app/controllers/api/account.php b/app/controllers/api/account.php
index 4276e780f5..6ef2bd8820 100644
--- a/app/controllers/api/account.php
+++ b/app/controllers/api/account.php
@@ -659,9 +659,9 @@ App::post('/v1/account/sessions/magic-url')
                 '$id' => $userId,
                 '$permissions' => [
                     'read(any)',
-                    'create(user: ' . $userId . ')',
-                    'update(user: ' . $userId . ')',
-                    'delete(user: ' . $userId . ')',
+                    'create(user:' . $userId . ')',
+                    'update(user:' . $userId . ')',
+                    'delete(user:' . $userId . ')',
                 ],
                 'email' => $email,
                 'emailVerification' => false,
@@ -697,7 +697,7 @@ App::post('/v1/account/sessions/magic-url')
 
         $token = $dbForProject->createDocument('tokens', $token
             ->setAttribute('$permissions', [
-                'read(user: ' . $user->getId() . ')',
+                'read(user:' . $user->getId() . ')',
                  'create(user:' . $user->getId() . ')',
                  'update(user:' . $user->getId() . ')',
                  'delete(user:' . $user->getId() . ')',
@@ -806,7 +806,7 @@ App::put('/v1/account/sessions/magic-url')
 
         $session = $dbForProject->createDocument('sessions', $session
             ->setAttribute('$permissions', [
-                'read(user: ' . $user->getId() . ')',
+                'read(user:' . $user->getId() . ')',
                 'create(user:' . $user->getId() . ')',
                 'update(user:' . $user->getId() . ')',
                 'delete(user:' . $user->getId() . ')',
@@ -952,7 +952,7 @@ App::post('/v1/account/sessions/phone')
 
         $token = $dbForProject->createDocument('tokens', $token
             ->setAttribute('$permissions', [
-                'read(user: ' . $user->getId() . ')',
+                'read(user:' . $user->getId() . ')',
                 'create(user:' . $user->getId() . ')',
                 'update(user:' . $user->getId() . ')',
                 'delete(user:' . $user->getId() . ')',
@@ -1048,7 +1048,7 @@ App::put('/v1/account/sessions/phone')
 
         $session = $dbForProject->createDocument('sessions', $session
             ->setAttribute('$permissions', [
-                'read(user: ' . $user->getId() . ')',
+                'read(user:' . $user->getId() . ')',
                 'create(user:' . $user->getId() . ')',
                 'update(user:' . $user->getId() . ')',
                 'delete(user:' . $user->getId() . ')',
@@ -1197,7 +1197,7 @@ App::post('/v1/account/sessions/anonymous')
         Authorization::setRole('user:' . $user->getId());
 
         $session = $dbForProject->createDocument('sessions', $session-> setAttribute('$permissions', [
-                'read(user: ' . $user->getId() . ')',
+                'read(user:' . $user->getId() . ')',
                 'create(user:' . $user->getId() . ')',
                 'update(user:' . $user->getId() . ')',
                 'delete(user:' . $user->getId() . ')',
@@ -2025,10 +2025,10 @@ App::post('/v1/account/recovery')
 
         $recovery = $dbForProject->createDocument('tokens', $recovery
             ->setAttribute('$permissions', [
-                'read(user: ' . $profile->getId() . ')',
-                'create(user: ' . $profile->getId() . ')',
-                'update(user: ' . $profile->getId() . ')',
-                'delete(user: ' . $profile->getId() . ')',
+                'read(user:' . $profile->getId() . ')',
+                'create(user:' . $profile->getId() . ')',
+                'update(user:' . $profile->getId() . ')',
+                'delete(user:' . $profile->getId() . ')',
             ]));
 
         $dbForProject->deleteCachedDocument('users', $profile->getId());
@@ -2190,10 +2190,10 @@ App::post('/v1/account/verification')
 
         $verification = $dbForProject->createDocument('tokens', $verification
             ->setAttribute('$permissions', [
-                'read(user: ' . $user->getId() . ')',
-                'create(user: ' . $user->getId() . ')',
-                'update(user: ' . $user->getId() . ')',
-                'delete(user: ' . $user->getId() . ')',
+                'read(user:' . $user->getId() . ')',
+                'create(user:' . $user->getId() . ')',
+                'update(user:' . $user->getId() . ')',
+                'delete(user:' . $user->getId() . ')',
             ]));
 
         $dbForProject->deleteCachedDocument('users', $user->getId());
@@ -2349,10 +2349,10 @@ App::post('/v1/account/verification/phone')
 
         $verification = $dbForProject->createDocument('tokens', $verification
             ->setAttribute('$permissions', [
-                'read(user: ' . $user->getId() . ')',
-                'create(user: ' . $user->getId() . ')',
-                'update(user: ' . $user->getId() . ')',
-                'delete(user: ' . $user->getId() . ')',
+                'read(user:' . $user->getId() . ')',
+                'create(user:' . $user->getId() . ')',
+                'update(user:' . $user->getId() . ')',
+                'delete(user:' . $user->getId() . ')',
             ]));
 
         $dbForProject->deleteCachedDocument('users', $user->getId());
diff --git a/app/controllers/api/teams.php b/app/controllers/api/teams.php
index 4ead90757f..709f88ed20 100644
--- a/app/controllers/api/teams.php
+++ b/app/controllers/api/teams.php
@@ -379,9 +379,9 @@ App::post('/v1/teams/:teamId/memberships')
             '$id' => $membershipId,
             '$permissions' => [
                 'read(any)',
-                'create(user: ' . $invitee->getId() . ', team:' . $team->getId() . '/owner)',
-                'update(user: ' . $invitee->getId() . ', team:' . $team->getId() . '/owner)',
-                'delete(user: ' . $invitee->getId() . ', team:' . $team->getId() . '/owner)',
+                'create(user:' . $invitee->getId() . ', team:' . $team->getId() . '/owner)',
+                'update(user:' . $invitee->getId() . ', team:' . $team->getId() . '/owner)',
+                'delete(user:' . $invitee->getId() . ', team:' . $team->getId() . '/owner)',
             ],
             'userId' => $invitee->getId(),
             'userInternalId' => $invitee->getInternalId(),
@@ -733,10 +733,10 @@ App::patch('/v1/teams/:teamId/memberships/:membershipId/status')
 
         $session = $dbForProject->createDocument('sessions', $session
             ->setAttribute('$permissions', [
-                'read(user: ' . $user->getId() . ')',
-                'create(user: ' . $user->getId() . ')',
-                'update(user: ' . $user->getId() . ')',
-                'delete(user: ' . $user->getId() . ')',
+                'read(user:' . $user->getId() . ')',
+                'create(user:' . $user->getId() . ')',
+                'update(user:' . $user->getId() . ')',
+                'delete(user:' . $user->getId() . ')',
             ]));
 
         $dbForProject->deleteCachedDocument('users', $user->getId());