diff --git a/backend/windmill-common/src/workspaces.rs b/backend/windmill-common/src/workspaces.rs
index 653ad1dcce..7a6fee034d 100644
--- a/backend/windmill-common/src/workspaces.rs
+++ b/backend/windmill-common/src/workspaces.rs
@@ -3104,6 +3104,7 @@ mod tests {
         DataTableRoleTenants { tenants: list.iter().map(|t| t.to_string()).collect() }
     }
 
+    #[cfg(all(feature = "private", feature = "enterprise"))]
     #[test]
     fn a_tenant_list_covers_users_groups_folders_and_the_wildcard() {
         let groups = vec!["analysts".to_string()];
@@ -3141,6 +3142,29 @@ mod tests {
         assert!(can_use_datatable_role(&tenants(&[]), &admin));
     }
 
+    #[cfg(not(all(feature = "private", feature = "enterprise")))]
+    #[test]
+    fn without_the_enterprise_edition_no_tenant_list_covers_anyone() {
+        let groups = vec![];
+        let folders = vec![];
+        let scopes = None;
+        let token_prefix = None;
+        let is_admin = true;
+        let is_operator = false;
+        let admin = crate::db::AuthedRef {
+            email: "alice@windmill.dev",
+            username: "alice",
+            is_admin: &is_admin,
+            is_operator: &is_operator,
+            groups: &groups,
+            folders: &folders,
+            scopes: &scopes,
+            token_prefix: &token_prefix,
+        };
+        assert!(!can_use_datatable_role(&tenants(&["*"]), &admin));
+        assert!(!can_use_datatable_role(&tenants(&["u/alice"]), &admin));
+    }
+
     #[test]
     fn a_datatable_ref_splits_off_its_role() {
         assert_eq!(parse_datatable_ref("sales").unwrap(), ("sales", None));