diff --git a/plugins/kubernetes-backend/src/auth/requirePermission.ts b/plugins/kubernetes-backend/src/auth/requirePermission.ts
index c95cd12c72..8f0463bd5b 100644
--- a/plugins/kubernetes-backend/src/auth/requirePermission.ts
+++ b/plugins/kubernetes-backend/src/auth/requirePermission.ts
@@ -42,8 +42,8 @@ export async function requirePermission(
     )
   )[0];
 
-  if (decision.result === AuthorizeResult.DENY) {
-    const err = new NotAllowedError('Unauthorized');
-    throw err;
+  if (decision.result === AuthorizeResult.ALLOW) {
+    return;
   }
+  throw new NotAllowedError('Unauthorized');
 }