diff --git a/website/static/js/accessRequestManager.js b/website/static/js/accessRequestManager.js
index 96446cd3a34..bed7b65696f 100644
--- a/website/static/js/accessRequestManager.js
+++ b/website/static/js/accessRequestManager.js
@@ -62,6 +62,8 @@ var AccessRequestModel = function(accessRequest, pageOwner, isRegistration, isPa
     self.respondToAccessRequest = function(trigger, data, event) {
         $osf.trackClick('button', 'click', trigger + '-project-access');
         $osf.block();
+        data = data || {};
+
         var requestUrl = $osf.apiV2Url('actions/requests/nodes/');
         var payload = self.requestAccessPayload(trigger, data.permissions, data.visible);
         var request = $osf.ajaxJSON(
diff --git a/website/templates/project/contributors.mako b/website/templates/project/contributors.mako
index d58a04f7bd7..1736d73cf53 100644
--- a/website/templates/project/contributors.mako
+++ b/website/templates/project/contributors.mako
@@ -433,7 +433,10 @@
                            visible: visible()
                        })}"
                 ><i class="fa fa-plus"></i> Add</button>
-                <span data-bind="click: function() {respondToAccessRequest('reject')}, visible: !$root.collapsed()"><i class="fa fa-times fa-2x remove-or-reject"></i></span>
+                <span data-bind="click: function() {respondToAccessRequest('reject', {
+                        visible: !$root.collapsed()
+                    })}"
+                ><i class="fa fa-times fa-2x remove-or-reject"></i></span>
                 <button class="btn btn-default btn-sm m-l-md" data-bind="click: function() {respondToAccessRequest('reject')}, visible: $root.collapsed()"><i class="fa fa-times"></i> Remove</button>
             </div>
         </td>