diff --git a/backend/internal/middleware/request.go b/backend/internal/middleware/request.go
index 29c50f4..d7a57e4 100644
--- a/backend/internal/middleware/request.go
+++ b/backend/internal/middleware/request.go
@@ -77,13 +77,13 @@ func RequestMiddleware[T any](role enums.Role) gin.HandlerFunc {
 
 		if userInfo.Role < role {
 			c.Status(http.StatusForbidden)
+			return
 		}
 
 		var body T
 		if err := c.ShouldBindJSON(&body); err != nil {
 			c.String(http.StatusBadRequest, err.Error())
 
-			// TODO: implement automatic validation here
 			return
 		}