diff --git a/packages/server/src/middleware/currentapp.js b/packages/server/src/middleware/currentapp.js
index 505bebc694..01b9dcc248 100644
--- a/packages/server/src/middleware/currentapp.js
+++ b/packages/server/src/middleware/currentapp.js
@@ -36,7 +36,10 @@ module.exports = async (ctx, next) => {
   }
 
   // deny access to application preview
-  if (isDevAppID(requestAppId) && (!ctx.user || !ctx.user.builder?.global)) {
+  if (
+    isDevAppID(requestAppId) &&
+    (!ctx.user || !ctx.user.builder || !ctx.user.builder.global)
+  ) {
     clearCookie(ctx, Cookies.CurrentApp)
     return ctx.redirect("/")
   }