diff --git a/internal/acl/acl.go b/internal/acl/acl.go
index c322330..979d37b 100644
--- a/internal/acl/acl.go
+++ b/internal/acl/acl.go
@@ -111,11 +111,11 @@ func buildUserAcls(cfg *config.Config, user *AuthenticatedUser) {
 }
 
 func isACLRelevant(cfg *config.Config, actionAcls []string, acl config.AccessControlList, user *AuthenticatedUser) bool {
-	if acl.AddToEveryAction {
-		return true
+	if !slices.Contains(user.acls, acl.Name) {
+		return false
 	}
 
-	if slices.Contains(user.acls, acl.Name) {
+	if acl.AddToEveryAction {
 		return true
 	}