diff --git a/wcs/forms/root.py b/wcs/forms/root.py
index 3b9ddd877..60d5b3ffa 100644
--- a/wcs/forms/root.py
+++ b/wcs/forms/root.py
@@ -251,7 +251,7 @@ class FormPage(Directory):
                     user_roles = set([])
                 other_roles = (self.formdef.roles or [])
                 if self.formdef.workflow_roles:
-                    other_roles.extend(self.formdef.workflow_roles.keys())
+                    other_roles.extend(self.formdef.workflow_roles.values())
                 if not user_roles.intersection(other_roles):
                     raise errors.AccessForbiddenError()