diff --git a/src/middleware/index.js b/src/middleware/index.js
index ae2622beea..87fcb0a6a6 100644
--- a/src/middleware/index.js
+++ b/src/middleware/index.js
@@ -52,7 +52,9 @@ middleware.authenticate = function (req, res, next) {
 middleware.ensureGlobalPrivilege = function (req, res, next) {
 	if (req.user) {
 		user.isAdminOrGlobalMod(req.uid, function (err, ok) {
-			if (ok) {
+			if (err) {
+				return next(err);
+			} else if (ok) {
 				return next();
 			} else {
 				controllers.helpers.notAllowed(req, res);