diff --git a/backend/src/ee/services/permission/project-permission.ts b/backend/src/ee/services/permission/project-permission.ts
index 43f832d22..c622e65a7 100644
--- a/backend/src/ee/services/permission/project-permission.ts
+++ b/backend/src/ee/services/permission/project-permission.ts
@@ -856,14 +856,12 @@ export const buildServiceTokenProjectPermission = (
 ) => {
   const canWrite = permission.includes("write");
   const canRead = permission.includes("read");
-
   const { can, build } = new AbilityBuilder<MongoAbility<ProjectPermissionSet>>(createMongoAbility);
   scopes.forEach(({ secretPath, environment }) => {
     [ProjectPermissionSub.Secrets, ProjectPermissionSub.SecretImports, ProjectPermissionSub.SecretFolders].forEach(
       (subject) => {
         if (canWrite) {
           can(ProjectPermissionActions.Edit, subject, {
-            // TODO: @Akhi
             // @ts-expect-error type
             secretPath: { $glob: secretPath },
             environment
@@ -879,27 +877,13 @@ export const buildServiceTokenProjectPermission = (
             environment
           });
         }
-        if (canRead && subject !== ProjectPermissionSub.Secrets) {
+        if (canRead) {
           can(ProjectPermissionActions.Read, subject, {
             // @ts-expect-error type
             secretPath: { $glob: secretPath },
             environment
           });
         }
-
-        if (subject === ProjectPermissionSub.Secrets && canRead) {
-          // @ts-expect-error type
-          can(ProjectPermissionSecretActions.ReadValue, subject as ProjectPermissionSub.Secrets, {
-            secretPath: { $glob: secretPath },
-            environment
-          });
-
-          // @ts-expect-error type
-          can(ProjectPermissionSecretActions.DescribeSecret, subject as ProjectPermissionSub.Secrets, {
-            secretPath: { $glob: secretPath },
-            environment
-          });
-        }
       }
     );
   });