diff --git a/core/server/api/canary/settings.js b/core/server/api/canary/settings.js index 3a9607ed8b..7a2f7bf073 100644 --- a/core/server/api/canary/settings.js +++ b/core/server/api/canary/settings.js @@ -193,18 +193,6 @@ module.exports = { permissions: { unsafeAttrsObject(frame) { return _.find(frame.data.settings, {key: 'labs'}); - }, - async before(frame) { - if (frame.options.context && frame.options.context.internal) { - return; - } - - const firstCoreSetting = frame.data.settings.find(setting => setting.group === 'core'); - if (firstCoreSetting) { - throw new NoPermissionError({ - message: i18n.t('errors.api.settings.accessCoreSettingFromExtReq') - }); - } } }, async query(frame) { diff --git a/core/server/services/settings/settings-bread-service.js b/core/server/services/settings/settings-bread-service.js index 80b1f076cc..a1857cb6a6 100644 --- a/core/server/services/settings/settings-bread-service.js +++ b/core/server/services/settings/settings-bread-service.js @@ -116,6 +116,7 @@ class SettingsBREADService { if (!(options.context && options.context.internal)) { const firstCoreSetting = filteredSettings.find(setting => getSetting(setting).group === 'core'); + if (firstCoreSetting) { throw new NoPermissionError({ message: tpl(messages.accessCoreSettingFromExtReq)