diff --git a/db/check.go b/db/check.go
index 0ad65fca..10207279 100644
--- a/db/check.go
+++ b/db/check.go
@@ -58,7 +58,7 @@ func (d *document) grant(ctx context.Context, met method) (ok bool, err error) {
 	// no need to check permissions.
 
 	if d.key == nil {
-		return false, nil
+		return true, nil
 	}
 
 	// If we are authenticated using DB, NS,