diff --git a/src/controllers/helpers.js b/src/controllers/helpers.js
index efdf97e811..699db7ba4f 100644
--- a/src/controllers/helpers.js
+++ b/src/controllers/helpers.js
@@ -117,7 +117,7 @@ helpers.notAllowed = function (req, res, error) {
 		if (err) {
 			return winston.error(err);
 		}
-		if (req.loggedIn) {
+		if (req.loggedIn || req.uid === -1) {
 			if (res.locals.isAPI) {
 				res.status(403).json({
 					path: req.path.replace(/^\/api/, ''),