fix: #8184 global mods unable to revoke other user sessions

src/middleware/user.js

@@ -78,6 +78,8 @@ module.exports = function (middleware) {
 		if (!allowed) {
 			return controllers.helpers.notAllowed(req, res);
 		}
+
+		return next();
 	}
 
 	middleware.checkGlobalPrivacySettings = function checkGlobalPrivacySettings(req, res, next) {