fixed public access of private items

MG-RAST · Jan 14, 2013 · fb3041a · fb3041a
1 parent 5d3f0f9
commit fb3041a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/MGRAST/lib/resources2/metagenome_statistics.pm b/src/MGRAST/lib/resources2/metagenome_statistics.pm
@@ -119,7 +119,7 @@ sub instance {
   $job = $job->[0];
 
   # check rights
-  unless ($job->public || $self->user->has_right(undef, 'view', 'metagenome', $job->metagenome_id) || $self->user->has_star_right('view', 'metagenome')) {
+  unless ($job->public || ($self->user && ($self->user->has_right(undef, 'view', 'metagenome', $job->metagenome_id) || $self->user->has_star_right('view', 'metagenome')))) {
     $self->return_data( {"ERROR" => "insufficient permissions to view this data"}, 401 );
   }