diff --git a/www/common/inner/access.js b/www/common/inner/access.js
index 0ba857a0a..6cbc8633f 100644
--- a/www/common/inner/access.js
+++ b/www/common/inner/access.js
@@ -870,7 +870,8 @@ define([
 
             // In the properties, we should have the edit href if we know it.
             // We should know it because the pad is stored, but it's better to check...
-            if (!data.noEditPassword && !opts.noEditPassword && owned && data.href) { // FIXME SHEET fix password change for sheets
+            //if (!data.noEditPassword && !opts.noEditPassword && owned && data.href) {
+            if (!data.noEditPassword && !opts.noEditPassword && owned && data.href && parsed.type !== "form") { // XXX password change in forms block responses (validation & decryption)
                 var isOO = parsed.type === 'sheet';
                 var isFile = parsed.hashData.type === 'file';
                 var isSharedFolder = parsed.type === 'drive';