diff --git a/app/upgrades/v3/upgrades.go b/app/upgrades/v3/upgrades.go
index 1a55682d..9c238e96 100644
--- a/app/upgrades/v3/upgrades.go
+++ b/app/upgrades/v3/upgrades.go
@@ -25,8 +25,8 @@ func CreateV3UpgradeHandler(
 		}
 
 		params := wasmtypes.DefaultParams()
-		// change this to AllowNoBody for mainnet
-		params.CodeUploadAccess = wasmtypes.AllowEverybody
+		// Permissioned cosmwasm
+		params.CodeUploadAccess = wasmtypes.AllowNobody
 		params.InstantiateDefaultPermission = wasmtypes.AccessTypeEverybody
 		if err := keepers.WasmKeeper.SetParams(ctx, params); err != nil {
 			return nil, err