diff --git a/src/apps.js b/src/apps.js
index 7eb6a5694..5848131b2 100644
--- a/src/apps.js
+++ b/src/apps.js
@@ -484,7 +484,7 @@ function hasAccessTo(app, user, callback) {
 
     if (!app.accessRestriction.groups) return callback(null, false);
 
-    if (app.accessRestriction.groups.some(function (gid) { return user.groupIds.indexOf(gid) !== -1; })) return callback(null, true);
+    if (app.accessRestriction.groups.some(function (gid) { return Array.isArray(user.groupIds) && user.groupIds.indexOf(gid) !== -1; })) return callback(null, true);
 
     callback(null, false);
 }