Check project access only when user is present

2026-05-26 13:51:13 +00:00 · 2026-02-20 16:38:53 +05:30
1 changed files with 1 additions and 1 deletions
@@ -343,7 +343,7 @@ Http::init()
         * But, for actions on resources (sites, functions, etc.) in a non-console project, we explicitly check
         * whether the admin user has necessary permission on the project (sites, functions, etc. don't have permissions associated to them).
         */
-        if (empty($apiKey) && $project->getId() !== 'console' && $mode === APP_MODE_ADMIN) {
+        if (empty($apiKey) && !$user->isEmpty() && $project->getId() !== 'console' && $mode === APP_MODE_ADMIN) {
            $input = new Input(Database::PERMISSION_READ, $project->getPermissionsByType(Database::PERMISSION_READ));
            $initialStatus = $authorization->getStatus();
            $authorization->enable();