diff --git a/auth/middleware.go b/auth/middleware.go
index 9def293e462b1b55a7dc7369a327a49763f8ebab..4f1de80b46c95e43984c631c2a38d6dab89da36a 100644
--- a/auth/middleware.go
+++ b/auth/middleware.go
@@ -87,7 +87,7 @@ }
 
 func (authctx *AuthContext) Access(scope, kind string) error {
 	switch authctx.AuthMethod {
-	case AUTH_INTERNAL, AUTH_COOKIE:
+	case AUTH_INTERNAL, AUTH_ANON_INTERNAL, AUTH_COOKIE:
 		return nil
 	case AUTH_OAUTH_LEGACY:
 		if kind == RO {
@@ -106,8 +106,6 @@ 		if !authctx.Grants.Has(scope, kind) {
 			return fmt.Errorf("Access denied, missing %v:%v grant", scope, kind)
 		}
 		return nil
-	case AUTH_ANON_INTERNAL:
-		return fmt.Errorf("Access denied for internal anonymous auth")
 	default:
 		panic(fmt.Errorf("Unknown auth method %q for access check", authctx.AuthMethod))
 	}