diff --git a/src/middleware/user.js b/src/middleware/user.js
index 9e794a6a9e..99f8e4c133 100644
--- a/src/middleware/user.js
+++ b/src/middleware/user.js
@@ -78,6 +78,8 @@ module.exports = function (middleware) {
 		if (!allowed) {
 			return controllers.helpers.notAllowed(req, res);
 		}
+
+		return next();
 	}
 
 	middleware.checkGlobalPrivacySettings = function checkGlobalPrivacySettings(req, res, next) {