diff --git a/packages/api/src/controllers/runners.js b/packages/api/src/controllers/runners.js
index 3ff917e6e..d11482f47 100644
--- a/packages/api/src/controllers/runners.js
+++ b/packages/api/src/controllers/runners.js
@@ -274,8 +274,6 @@ module.exports = {
 
   start_meta: true,
   async start({ script }, req) {
-    await testStandardPermission('run-shell-script', req);
-    
     const runid = crypto.randomUUID();
 
     if (script.type == 'json') {
@@ -291,6 +289,8 @@ module.exports = {
       return this.startCore(runid, scriptTemplate(js, false));
     }
 
+    await testStandardPermission('run-shell-script', req);
+
     if (!platformInfo.allowShellScripting) {
       sendToAuditLog(req, {
         category: 'shell',