diff --git a/packages/central-server/src/apiV2/dashboardVisualisations/EditDashboardVisualisation.js b/packages/central-server/src/apiV2/dashboardVisualisations/EditDashboardVisualisation.js index e5e71b4793..9136a5cd48 100644 --- a/packages/central-server/src/apiV2/dashboardVisualisations/EditDashboardVisualisation.js +++ b/packages/central-server/src/apiV2/dashboardVisualisations/EditDashboardVisualisation.js @@ -84,7 +84,10 @@ export class EditDashboardVisualisation extends EditHandler { async editRecord() { const { report } = this.req.body; - await assertPermissionGroupAccess(this.accessPolicy, report.permission_group); + // Skip permission check as legacy report has no permission group + if (report.permission_group) { + assertPermissionGroupAccess(this.accessPolicy, report.permission_group); + } return this.models.wrapInTransaction(async transactingModels => { const dashboardItemRecord = this.getDashboardItemRecord(); const reportRecord = this.getReportRecord();