diff --git a/app/middleware/repo.go b/app/middleware/repo.go
index 9d53919..0810a7a 100644
--- a/app/middleware/repo.go
+++ b/app/middleware/repo.go
@@ -31,7 +31,7 @@ func RepoMiddleware(db *db.DB) mux.MiddlewareFunc {
 
 			// verify if the user has access to the repo.
 			reqUser, ok := r.Context().Value(lib.UserKey).(*types.User)
-			if dbRepo.IsPrivate && (ok || dbRepo.User.ID != reqUser.ID) {
+			if dbRepo.IsPrivate && (!ok || dbRepo.User.ID != reqUser.ID) {
 				templating.Render(w, r, "base", "repo/not_found")
 				return
 			}