diff --git a/crproxy.go b/crproxy.go
index 8c34fe9..e2c8c5c 100644
--- a/crproxy.go
+++ b/crproxy.go
@@ -531,7 +531,7 @@ func (c *CRProxy) ServeHTTP(rw http.ResponseWriter, r *http.Request) {
 		Name: info.Image,
 	}
 
-	if c.blockFunc != nil && c.blockFunc(imageInfo) {
+	if c.blockFunc != nil && !c.isPrivileged(r, nil) && c.blockFunc(imageInfo) {
 		if c.blockMessage != "" {
 			errcode.ServeJSON(rw, errcode.ErrorCodeDenied.WithMessage(c.blockMessage))
 		} else {