diff --git a/app/controllers/concerns/authorization.rb b/app/controllers/concerns/authorization.rb
index 9a3a8279a..46769992e 100644
--- a/app/controllers/concerns/authorization.rb
+++ b/app/controllers/concerns/authorization.rb
@@ -22,7 +22,7 @@ module Authorization
     end
 
     def ensure_staff
-      head :forbidden unless Current.user.staff?
+      head :forbidden unless Current.identity.staff?
     end
 
     def ensure_can_access_account