diff --git a/packages/server/src/middleware/currentapp.js b/packages/server/src/middleware/currentapp.js
index 55a657add0..e523850e1d 100644
--- a/packages/server/src/middleware/currentapp.js
+++ b/packages/server/src/middleware/currentapp.js
@@ -58,7 +58,7 @@ module.exports = async (ctx, next) => {
   // If user and app tenant Ids do not match, 403
   if (env.MULTI_TENANCY && ctx.user) {
     const userTenantId = getTenantId()
-    const tenantId = getTenantIDFromAppID(ctx.appId) || DEFAULT_TENANT_ID
+    const tenantId = getTenantIDFromAppID(appId) || DEFAULT_TENANT_ID
     if (tenantId !== userTenantId) {
       ctx.throw(403, "Cannot access application.")
     }