From fe6d64ccbc8fd356d1073224e4a481e85d3f5605 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Bar=C4=B1=C5=9F=20Soner=20U=C5=9Fakl=C4=B1?=
 <barisusakli@gmail.com>
Date: Fri, 26 Apr 2019 12:59:01 -0400
Subject: [PATCH] fix: #7147

---
 src/controllers/helpers.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/controllers/helpers.js b/src/controllers/helpers.js
index efdf97e811..699db7ba4f 100644
--- a/src/controllers/helpers.js
+++ b/src/controllers/helpers.js
@@ -117,7 +117,7 @@ helpers.notAllowed = function (req, res, error) {
 		if (err) {
 			return winston.error(err);
 		}
-		if (req.loggedIn) {
+		if (req.loggedIn || req.uid === -1) {
 			if (res.locals.isAPI) {
 				res.status(403).json({
 					path: req.path.replace(/^\/api/, ''),