diff --git a/firebase.storage.rules b/firebase.storage.rules
index ee436ee..59c4aa8 100644
--- a/firebase.storage.rules
+++ b/firebase.storage.rules
@@ -12,7 +12,7 @@ service firebase.storage {
 
     match /{organizationCode}/positives.json.gz {
       allow read: if request.auth != null
-                  && request.auth.organizationCode == organizationCode
+                  && request.auth.token.organizationCode == organizationCode
     }
   }
 }