diff --git a/main/frontend-webdav/src/main/java/org/cryptomator/webdav/jackrabbitservlet/WebDavServlet.java b/main/frontend-webdav/src/main/java/org/cryptomator/webdav/jackrabbitservlet/WebDavServlet.java
index 20ad8eac0..0767d5de6 100644
--- a/main/frontend-webdav/src/main/java/org/cryptomator/webdav/jackrabbitservlet/WebDavServlet.java
+++ b/main/frontend-webdav/src/main/java/org/cryptomator/webdav/jackrabbitservlet/WebDavServlet.java
@@ -120,10 +120,10 @@ public class WebDavServlet extends AbstractWebdavServlet {
 	}
 
 	private boolean hasCorrectLockTokens(DavSession session, DavResource resource) {
-		boolean access = true;
+		boolean access = false;
 		final String[] providedLockTokens = session.getLockTokens();
 		for (ActiveLock lock : resource.getLocks()) {
-			access &= ArrayUtils.contains(providedLockTokens, lock.getToken());
+			access |= ArrayUtils.contains(providedLockTokens, lock.getToken());
 		}
 		return access;
 	}