diff --git a/running_exercise/schema/mutation.py b/running_exercise/schema/mutation.py
index a9681e4bda633d4f5203994650f310c30838a72b..7f3d6f9545ec402850ac4304bcf9bc73190a7266 100644
--- a/running_exercise/schema/mutation.py
+++ b/running_exercise/schema/mutation.py
@@ -3,7 +3,6 @@ from typing import List
 import graphene
 from django.conf import settings
 
-from user.models import User
 from aai.utils import protected, extra_protected, input_object_protected, Check
 from common_lib.logger import logger
 from common_lib.schema_types import ExerciseType, EmailThreadType
@@ -25,6 +24,7 @@ from running_exercise.lib.instructor_action_handler import (
 from running_exercise.lib.milestone_handler import instructor_modify_milestone
 from running_exercise.lib.team_action_handler import TeamActionHandler
 from running_exercise.questionnaire_handler import QuestionnaireHandler
+from user.models import User
 
 
 class UseToolMutation(graphene.Mutation):
@@ -208,7 +208,7 @@ class SendCustomInjectMutation(graphene.Mutation):
     operation_done = graphene.Boolean()
 
     @classmethod
-    @protected(Perms.update_exercise.full_name)
+    @protected(User.AuthGroup.INSTRUCTOR)
     def mutate(cls, root, info, custom_inject_input: CustomInjectInput):
         user = None if settings.NOAUTH else info.context.user
         InstructorActionHandler.send_custom_inject(custom_inject_input, user)
diff --git a/running_exercise/serializers.py b/running_exercise/serializers.py
index 82313a1b85baf1f8cbaa7e69e1cfac62a15b2e3f..71f1d5ea073d18c27f148ce2a365f554e7d53555 100644
--- a/running_exercise/serializers.py
+++ b/running_exercise/serializers.py
@@ -98,7 +98,7 @@ class CustomInjectDetailsSerializer(ModelSerializer):
 
     class Meta:
         model = CustomInjectDetails
-        fields = ["content", "sender", "user_analytics_id"]
+        fields = ["content", "user_analytics_id"]
 
     def get_user_analytics_id(self, instance) -> int:
         analytics_ids = self.context.get("analytics_ids", None)