diff --git a/pkg/schema/factory.go b/pkg/schema/factory.go
index 6c25e9e..7c106b2 100644
--- a/pkg/schema/factory.go
+++ b/pkg/schema/factory.go
@@ -90,8 +90,12 @@ func (c *Collection) schemasForSubject(access *accesscontrol.AccessSet) (*types.
 						ResourceName: ns,
 					})
 				}
-				verbAccess["list"] = accessList
+				verbAccess["get"] = accessList
 				verbAccess["watch"] = accessList
+				if len(accessList) == 0 {
+					// always allow list
+					s.CollectionMethods = append(s.CollectionMethods, http.MethodGet)
+				}
 			} else {
 				continue
 			}