fix: #7147

6 years ago · fe6d64ccbc
parent f86d74d8b9
commit fe6d64ccbc
1 changed files with 1 additions and 1 deletions
--- a/src/controllers/helpers.js
+++ b/src/controllers/helpers.js
@ -117,7 +117,7 @@ helpers.notAllowed = function (req, res, error) {
 		if (err) {
 			return winston.error(err);
 		}
-		if (req.loggedIn) {
+		if (req.loggedIn || req.uid === -1) {
 			if (res.locals.isAPI) {
 				res.status(403).json({
 					path: req.path.replace(/^\/api/, ''),