diff --git a/hosts/dav/radicale.nix b/hosts/dav/radicale.nix
index 29a8bb5..8b0e8b5 100644
--- a/hosts/dav/radicale.nix
+++ b/hosts/dav/radicale.nix
@@ -42,19 +42,19 @@ in
     radicale = {
       enable = true;
       rights = {
-        readonly = {
+        root = {
           user = ".*";
-          collection = ".*";
+          collection = "";
           permissions = "r";
         };
-        cccb = {
-          user = "cccb";
-          collection = ".*";
+        calendars = {
+          user = ".*";
+          collection = "{user}/[^/]+";
           permissions = "rw";
         };
-        openwrt = {
-          user = "openwrt";
-          collection = "openwrt";
+        principal = {
+          user = ".*";
+          collection = "{user}";
           permissions = "rw";
         };
       };