diff --git a/weed/s3api/s3api_bucket_handlers.go b/weed/s3api/s3api_bucket_handlers.go
index 73cbd5b00..35525c45f 100644
--- a/weed/s3api/s3api_bucket_handlers.go
+++ b/weed/s3api/s3api_bucket_handlers.go
@@ -113,7 +113,7 @@ func (s3a *S3ApiServer) ListBucketsHandler(w http.ResponseWriter, r *http.Reques
 // based on ownership rules. Returns true if the bucket should be visible, false otherwise.
 //
 // Visibility rules:
-// - Unauthenticated requests (identity == nil): all buckets visible
+// - Unauthenticated requests (identity == nil): no buckets visible
 // - Admin users: all buckets visible
 // - Non-admin users: only buckets they own (matching identity.Name) are visible
 // - Buckets without owner metadata are hidden from non-admin users