Ejabberd. Different ports – different access

There is a connection on two ports … on 5288 users connect via a web plug from a browser, on 5222 via normal clients … when there are no restrictions d & Access, everything connects, everything works … if I add only admin access on the 5222 client port, then the WebSocket on 5288 starts transmitting the message "Access denied by the service service." of the SASL link. " … the question is, is it possible to divide access by ports? Where can I twist it?

listening:
-
port: 5288
module: ejabberd_http
request_handlers:
"/ ws": ejabberd_http_ws
web_admin: true
-
port: 5222
module: ejabberd_c2s
# access:
# - allow: admin