diff --git a/internal/handlers/collections.go b/internal/handlers/collections.go
index d8ce4137..dfba00e9 100644
--- a/internal/handlers/collections.go
+++ b/internal/handlers/collections.go
@@ -618,6 +618,17 @@ func (h *CollectionHandler) SetCollectionChainOrder(c *echo.Context) error {
 	if err != nil {
 		return c.JSON(http.StatusNotFound, map[string]string{"error": "collection not found"})
 	}
+	// Same owner gate as the sibling config mutations (SetMatchMode,
+	// ReorderItems) — my endpoint writes the row, so it must not let a
+	// non-owner flip someone else's chain order.
+	if u, ok := c.Get("user").(database.Users); ok {
+		owns, err := h.collectionService.UserOwnsCollection(c.Request().Context(), collectionID, uuid.UUID(u.ID.Bytes))
+		if err != nil || !owns {
+			return c.JSON(http.StatusForbidden, map[string]string{"error": "only the collection owner can change it"})
+		}
+	} else {
+		return c.JSON(http.StatusUnauthorized, map[string]string{"error": "no user in context"})
+	}
 
 	settings := map[string]interface{}{}
 	if len(collection.ViewSettings) > 0 {