diff --git a/CHANGELOG.md b/CHANGELOG.md
index ed84aeeb0..e140bef44 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -15,12 +15,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - Harmonized the data providers management style of the admin control panel
 - Extended the data providers management of the admin control panel by the asset profile count
+- Restricted the permissions of the demo user
 - Renamed `Order` to `activities` in the `User` database schema
 - Improved the language localization for Catalan (`ca`)
 - Improved the language localization for Chinese (`zh`)
 - Improved the language localization for Dutch (`nl`)
 - Improved the language localization for German (`de`)
 - Improved the language localization for Italian (`it`)
+- Upgraded `countup.js` from version `2.8.0` to `2.8.2`
 - Upgraded `nestjs` from version `10.4.15` to `11.0.12`
 - Upgraded `yahoo-finance2` from version `2.11.3` to `3.3.1`
 
diff --git a/apps/api/src/app/user/user.service.ts b/apps/api/src/app/user/user.service.ts
index cf55b8862..87c82fa0b 100644
--- a/apps/api/src/app/user/user.service.ts
+++ b/apps/api/src/app/user/user.service.ts
@@ -394,9 +394,11 @@ export class UserService {
         // Reset holdings view mode
         user.Settings.settings.holdingsViewMode = undefined;
       } else if (user.subscription?.type === 'Premium') {
-        currentPermissions.push(permissions.createApiKey);
-        currentPermissions.push(permissions.enableDataProviderGhostfolio);
-        currentPermissions.push(permissions.reportDataGlitch);
+        if (!hasRole(user, Role.DEMO)) {
+          currentPermissions.push(permissions.createApiKey);
+          currentPermissions.push(permissions.enableDataProviderGhostfolio);
+          currentPermissions.push(permissions.reportDataGlitch);
+        }
 
         currentPermissions = without(
           currentPermissions,
diff --git a/package-lock.json b/package-lock.json
index 52924f839..b2e0f3b9f 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -61,7 +61,7 @@
         "color": "5.0.0",
         "countries-and-timezones": "3.7.2",
         "countries-list": "3.1.1",
-        "countup.js": "2.8.0",
+        "countup.js": "2.8.2",
         "date-fns": "4.1.0",
         "envalid": "8.0.0",
         "google-spreadsheet": "3.2.0",
@@ -16965,9 +16965,9 @@
       "license": "MIT"
     },
     "node_modules/countup.js": {
-      "version": "2.8.0",
-      "resolved": "https://registry.npmjs.org/countup.js/-/countup.js-2.8.0.tgz",
-      "integrity": "sha512-f7xEhX0awl4NOElHulrl4XRfKoNH3rB+qfNSZZyjSZhaAoUk6elvhH+MNxMmlmuUJ2/QNTWPSA7U4mNtIAKljQ==",
+      "version": "2.8.2",
+      "resolved": "https://registry.npmjs.org/countup.js/-/countup.js-2.8.2.tgz",
+      "integrity": "sha512-UtRoPH6udaru/MOhhZhI/GZHJKAyAxuKItD2Tr7AbrqrOPBX/uejWBBJt8q86169AMqKkE9h9/24kFWbUk/Bag==",
       "license": "MIT"
     },
     "node_modules/create-jest": {
diff --git a/package.json b/package.json
index 51b592245..a995a8a47 100644
--- a/package.json
+++ b/package.json
@@ -107,7 +107,7 @@
     "color": "5.0.0",
     "countries-and-timezones": "3.7.2",
     "countries-list": "3.1.1",
-    "countup.js": "2.8.0",
+    "countup.js": "2.8.2",
     "date-fns": "4.1.0",
     "envalid": "8.0.0",
     "google-spreadsheet": "3.2.0",