diff --git a/common/auth.py b/common/auth.py
index 4f7c9f8..174208d 100644
--- a/common/auth.py
+++ b/common/auth.py
@@ -84,6 +84,10 @@ def get_key_permission(request: Request):
     Internal only! Use the depends functions for incoming requests.
     """
 
+    # Give full admin permissions if auth is disabled
+    if DISABLE_AUTH:
+        return "admin"
+
     # Hyphens are okay here
     test_key = coalesce(
         request.headers.get("x-admin-key"),