diff --git a/auth/store.go b/auth/store.go
index 6f5906de4..269eb979e 100644
--- a/auth/store.go
+++ b/auth/store.go
@@ -764,6 +764,9 @@ func (as *authStore) IsAdminPermitted(authInfo *AuthInfo) error {
 	if !as.isAuthEnabled() {
 		return nil
 	}
+	if authInfo == nil {
+		return ErrUserEmpty
+	}
 
 	tx := as.be.BatchTx()
 	tx.Lock()