diff --git a/backend/hub/views.py b/backend/hub/views.py
index 1cb7b83f..d6691b15 100644
--- a/backend/hub/views.py
+++ b/backend/hub/views.py
@@ -816,18 +816,15 @@ def post(self, request, *args, **kwargs):
 
         user = self.request.user
         user_org: Organization = user.organization
-        candidate: Candidate = self.object
+        candidate: Candidate = self.get_object()
 
         if not user_org:
             raise PermissionDenied
 
-        if not user_org.is_complete_for_candidate:
-            raise PermissionDenied
-
         if not candidate:
             raise PermissionDenied
 
-        if not candidate.is_complete:
+        if not candidate == user_org.candidate:
             raise PermissionDenied
 
         return super().post(request, *args, **kwargs)