diff --git a/livestreams.py b/livestreams.py
index 80d02eaaf3f392e1c7ecfafe7616961e1bc3fc85..bd0b97d4ef41b1ccf19ee86b910abe636bc4a873 100644
--- a/livestreams.py
+++ b/livestreams.py
@@ -17,9 +17,9 @@ def streamauth():
 		return 'Bad request', 400
 	if not internal:
 		return 'Forbidden', 403
-	if request.values['pass'] != 'caisoh8aht0wuSu':
-		return 'Forbidden', 403
 	if request.values['call'] == 'publish':
+		if request.values['pass'] != 'caisoh8aht0wuSu':
+			return 'Forbidden', 403
 		matches = query("SELECT lectures.* FROM lectures JOIN courses ON lectures.course_id = courses.id WHERE courses.handle = ? ORDER BY lectures.time DESC", request.values['name'])
 		now = datetime.now()
 		match = {'id': -1}