diff --git a/api/handler/acl.go b/api/handler/acl.go
index 2f277b0c..718f3925 100644
--- a/api/handler/acl.go
+++ b/api/handler/acl.go
@@ -378,7 +378,7 @@ func (h *handler) PutBucketPolicyHandler(w http.ResponseWriter, r *http.Request)
 	}
 
 	token, err := getSessionTokenSetEACL(r.Context())
-	if err == nil {
+	if err != nil {
 		h.logAndSendError(w, "couldn't get eacl token", reqInfo, err)
 		return
 	}