diff --git a/ldapcherry/__init__.py b/ldapcherry/__init__.py
index 4d0c4d9..abfc476 100644
--- a/ldapcherry/__init__.py
+++ b/ldapcherry/__init__.py
@@ -904,12 +904,12 @@ class LdapCherry(object):
     @exception_decorator
     def checkppolicy(self, **params):
         """ search user page """
+        self._check_auth(must_admin=False)
         keys = params.keys()
         if len(keys) != 1:
             cherrypy.response.status = 400
             return "bad argument"
         password = params[keys[0]]
-        self._check_auth(must_admin=False)
         is_admin = self._check_admin()
         ret = self._checkppolicy(password)
         if ret['match']: