diff --git a/builders.js b/builders.js
index 5ca25ce..001f2c1 100755
--- a/builders.js
+++ b/builders.js
@@ -1339,7 +1339,7 @@ ActionCaller.prototype.exec = function() {
 		}
 	}
 
-	if (action.sa) {
+	if (action.sa || action.su) {
 		if (!$.user || (!$.user.sa && !$.user.su)) {
 			$.invalid(401);
 			return;