diff --git a/plugins/Cors/CorsPlugin.py b/plugins/Cors/CorsPlugin.py
index cdb18410..a157bd41 100644
--- a/plugins/Cors/CorsPlugin.py
+++ b/plugins/Cors/CorsPlugin.py
@@ -27,7 +27,7 @@ class UiWebsocketPlugin(object):
         if super(UiWebsocketPlugin, self).hasSitePermission(address, cmd=cmd):
             return True
 
-        if not "Cors:%s" % address in self.site.settings["permissions"] or cmd not in ["dbQuery", "userGetSettings", "siteInfo"]:
+        if not "Cors:%s" % address in self.site.settings["permissions"] or cmd not in ["fileQuery", "dbQuery", "userGetSettings", "siteInfo"]:
             return False
         else:
             return True