diff --git a/packages/nocodb/src/middlewares/extract-ids/extract-ids.middleware.ts b/packages/nocodb/src/middlewares/extract-ids/extract-ids.middleware.ts index ae820792c4..6dd0c79582 100644 --- a/packages/nocodb/src/middlewares/extract-ids/extract-ids.middleware.ts +++ b/packages/nocodb/src/middlewares/extract-ids/extract-ids.middleware.ts @@ -211,7 +211,10 @@ export class AclMiddleware implements NestInterceptor { const req = context.switchToHttp().getRequest(); - const userScopeRole = getUserRoleForScope(req.user, scope); + const userScopeRole = + req.user.roles?.[OrgUserRoles.SUPER_ADMIN] === true + ? OrgUserRoles.SUPER_ADMIN + : getUserRoleForScope(req.user, scope); if (!userScopeRole) { NcError.forbidden('Unauthorized access');