diff --git a/src/graphqlSchema.js b/src/graphqlSchema.js
index 8219ea200422ebd3ecdfd32c242d407d3c9613d1..896b6815e6d9fa61515f4951c34d385b06b730a7 100644
--- a/src/graphqlSchema.js
+++ b/src/graphqlSchema.js
@@ -1,11 +1,13 @@
 const config = require('config')
-
+const isEmpty = require('lodash/isEmpty')
 const { applyMiddleware } = require('graphql-middleware')
 const { shield } = require('graphql-shield')
 let schema = require('pubsweet-server/src/graphql/schema')
 
-if (config.has('permissions')) {
-  schema = applyMiddleware(schema, shield(config.get('permissions')))
+const permissions = config.has('permissions') && config.get('permissions')
+
+if (permissions && !isEmpty(permissions)) {
+  schema = applyMiddleware(schema, shield(permissions))
 }
 
 module.exports = schema