diff --git a/aaad/authorizers.py b/aaad/authorizers.py
index e9a978d..e3cc720 100644
--- a/aaad/authorizers.py
+++ b/aaad/authorizers.py
@@ -90,7 +90,7 @@ def authorize(self, user, act_as, resource, logging, info, data, content_type, a
             allowed_users_list = []
             allowed_actions = []
             if 'action' in self.data[act_as] and self.data[act_as]['action'] != None:
-                for item in self.data[user]['action'][action]:
+                for item in self.data[act_as]['action'][action]:
                     temp_item = {}
                     if type(item) == str:
                         temp_item = {}