From 2c01fd088b45e0ae68531b01cbd9bf4583c08a4f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ivar=20Conradi=20=C3=98sthus?= <ivarconr@gmail.com>
Date: Tue, 13 Apr 2021 11:41:22 +0200
Subject: [PATCH] fix: should only do checkRbac if it exists

---
 src/lib/routes/controller.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/lib/routes/controller.js b/src/lib/routes/controller.js
index ecd05de4ad..30764ca222 100644
--- a/src/lib/routes/controller.js
+++ b/src/lib/routes/controller.js
@@ -9,7 +9,7 @@ const checkPermission = permission => {
         if (!permission) {
             return next();
         }
-        if (await req.checkRbac(permission)) {
+        if (req.checkRbac && (await req.checkRbac(permission))) {
             return next();
         }
         return res