diff --git a/auth/service/service.go b/auth/service/service.go
index d3d8d388..e6a4447b 100644
--- a/auth/service/service.go
+++ b/auth/service/service.go
@@ -219,7 +219,7 @@ func accessForRule(rule *rulePb.Rule, acc *auth.Account, res *auth.Resource) rul
 		}
 	}
 
-	return rulePb.Access_DENIED
+	return rulePb.Access_UNKNOWN
 }
 
 // listRules gets all the rules from the store which have an id