diff --git a/packages/backend/src/graphql/mutations/duplicate-flow.js b/packages/backend/src/graphql/mutations/duplicate-flow.js
index 77e0a70b..4b5c67f0 100644
--- a/packages/backend/src/graphql/mutations/duplicate-flow.js
+++ b/packages/backend/src/graphql/mutations/duplicate-flow.js
@@ -41,7 +41,7 @@ const duplicateFlow = async (_parent, params, context) => {
   context.currentUser.can('create', 'Flow');
 
   const flow = await context.currentUser
-    .$relatedQuery('flows')
+    .authorizedFlows
     .withGraphJoined('[steps]')
     .orderBy('steps.position', 'asc')
     .findOne({ 'flows.id': params.input.id })