diff --git a/pkg/subscribe/handler.go b/pkg/subscribe/handler.go
index 5daa283f..31de57df 100644
--- a/pkg/subscribe/handler.go
+++ b/pkg/subscribe/handler.go
@@ -113,7 +113,6 @@ func handler(apiContext *types.APIContext) error {
 			if schema != nil {
 				buffer := &bytes.Buffer{}
 
-				apiContext.ExpireAccessControl(schema)
 				if err := jsonWriter.VersionBody(apiContext, &schema.Version, buffer, item); err != nil {
 					cancel()
 					continue
diff --git a/store/proxy/proxy_store.go b/store/proxy/proxy_store.go
index 533b65d7..c5f35d11 100644
--- a/store/proxy/proxy_store.go
+++ b/store/proxy/proxy_store.go
@@ -271,6 +271,7 @@ func (s *Store) Watch(apiContext *types.APIContext, schema *types.Schema, opt *t
 	}
 
 	return convert.Chan(c, func(data map[string]interface{}) map[string]interface{} {
+		apiContext.ExpireAccessControl(schema)
 		return apiContext.AccessControl.Filter(apiContext, schema, data, s.authContext)
 	}), nil
 }