diff --git a/pkg/permission/ruleset.go b/pkg/permission/ruleset.go
index 2cf1eef016652e7efee2f122deb8be55fd3408c7..e1a02d269cd3951f782cf8aec9d661e2c8f0ceef 100644
--- a/pkg/permission/ruleset.go
+++ b/pkg/permission/ruleset.go
@@ -96,8 +96,8 @@ func (r Rule) WithReadonlyFields(ff ...string) *Rule {
 		Actions:         append([]Action(nil), r.Actions...),
 		Access:          r.Access,
 		HiddenFields:    append([]string(nil), r.HiddenFields...),
-		DenyReadFields:  append(ff, r.DenyReadFields...),
-		DenyWriteFields: append([]string(nil), r.DenyWriteFields...),
+		DenyWriteFields: append(ff, r.DenyWriteFields...),
+		DenyReadFields:  append([]string(nil), r.DenyReadFields...),
 		ReadFilter:      r.ReadFilter,
 		WriteFilter:     r.WriteFilter,
 	}