diff --git a/http/users.go b/http/users.go
index 66aab7e2..be7a2d41 100644
--- a/http/users.go
+++ b/http/users.go
@@ -94,7 +94,7 @@ var userGetHandler = withSelfOrAdmin(func(w http.ResponseWriter, r *http.Request
 	}
 
 	u.Password = ""
-	if !u.Perm.Admin {
+	if !d.user.Perm.Admin {
 		u.Scope = ""
 	}
 	return renderJSON(w, r, u)