diff --git a/lib/nntp/tiny/session.py b/lib/nntp/tiny/session.py
index 27a50ba..008f6d8 100644
--- a/lib/nntp/tiny/session.py
+++ b/lib/nntp/tiny/session.py
@@ -741,7 +741,7 @@ class Session():
         return True
 
     def _cmd_post(self):
-        if not self.perms & UserPermission.POST:
+        if self.perms is None or not self.perms & UserPermission.POST:
             self.respond(ResponseCode.NNTP_POST_PROHIBITED)
 
         self.respond(ResponseCode.NNTP_INQUIRY_ARTICLE)
@@ -768,7 +768,7 @@ class Session():
                 return self.respond(ResponseCode.NNTP_POST_FAILED)
 
     def _cmd_ihave(self, message_id):
-        if not self.perms & UserPermission.POST:
+        if self.perms is None or not self.perms & UserPermission.POST:
             self.respond(ResponseCode.NNTP_POST_PROHIBITED)
 
         sql = """