diff --git a/routers/api/packages/api.go b/routers/api/packages/api.go
index 36e449cdb0..b5893f81fa 100644
--- a/routers/api/packages/api.go
+++ b/routers/api/packages/api.go
@@ -143,7 +143,7 @@ func reqPackageAccess(accessMode perm.AccessMode) func(ctx *context.Context) {
 					}
 				}
 
-				grantedMode := perm.AccessModeNone
+				var grantedMode perm.AccessMode
 				if task.RepoID == packageRepoID {
 					// Same-repository access: use the token's configured package permission
 					if err := task.LoadJob(ctx); err == nil && task.Job != nil {