diff --git a/app/controllers/apps_controller.rb b/app/controllers/apps_controller.rb
index 91f2092bc0..865646604d 100644
--- a/app/controllers/apps_controller.rb
+++ b/app/controllers/apps_controller.rb
@@ -48,8 +48,8 @@ class AppsController < ApplicationController
   end
 
   def update
-    authorize App
     @app = App.find params[:id]
+    authorize @app
     @app.update(params['app'].permit('name', 'current_version_id', 'is_public'))
   end