diff --git a/server/routes/api/documents/documents.ts b/server/routes/api/documents/documents.ts
index 90b737857..b5819f4f9 100644
--- a/server/routes/api/documents/documents.ts
+++ b/server/routes/api/documents/documents.ts
@@ -915,7 +915,9 @@ router.post(
           collectionId,
           "collectionId is required to publish a draft without collection"
         );
-        collection = await Collection.findByPk(collectionId as string);
+        collection = await Collection.scope({
+          method: ["withMembership", user.id],
+        }).findByPk(collectionId!);
       }
       authorize(user, "publish", collection);
     }