From 9f605a0c62fd7055f90e29b22c0b429d5e032c25 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jakub=20Dugovi=C4=8D?= <jdugovic@redhat.com>
Date: Thu, 12 Feb 2026 10:55:09 +0100
Subject: [PATCH] RHINENG-22821: fix rbac/kessel switch

---
 manager/routes/routes.go | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/manager/routes/routes.go b/manager/routes/routes.go
index 60e7c02eb..4a6b4de86 100644
--- a/manager/routes/routes.go
+++ b/manager/routes/routes.go
@@ -18,9 +18,10 @@ func InitAPI(api *gin.RouterGroup, config docs.EndpointsConfig) { // nolint: fun
 	api.Use(middlewares.DatabaseWithContext())
 
 	userAuth := api.Group("/")
-	userAuth.Use(middlewares.RBAC())
 	if utils.CoreCfg.KesselEnabled {
 		userAuth.Use(middlewares.Kessel())
+	} else {
+		userAuth.Use(middlewares.RBAC())
 	}
 	userAuth.Use(middlewares.PublicAuthenticator())