diff --git a/rave-components/rave-core/src/main/java/org/apache/rave/portal/security/impl/DefaultPagePermissionEvaluator.java b/rave-components/rave-core/src/main/java/org/apache/rave/portal/security/impl/DefaultPagePermissionEvaluator.java index e5c75dbc..81cf436b 100644 --- a/rave-components/rave-core/src/main/java/org/apache/rave/portal/security/impl/DefaultPagePermissionEvaluator.java +++ b/rave-components/rave-core/src/main/java/org/apache/rave/portal/security/impl/DefaultPagePermissionEvaluator.java @@ -224,7 +224,8 @@ private boolean isPageMember(Authentication authentication, Page page, List members = trustedPage.getMembers(); if (members != null) { for (PageUser pageUser : members){ - if (userRepository.get(pageUser.getUserId()).getUsername().equals(viewer)){ + User user = userRepository.get(pageUser.getUserId()); + if (user != null && user.getUsername().equals(viewer)){ log.info("User "+viewer+" is a member of page "+trustedPage.getId()); if(checkEditorStatus){ log.info("checking editor:"+trustedPage.getId()+"@"+viewer+"@"+pageUser.isEditor()); @@ -238,4 +239,4 @@ private boolean isPageMember(Authentication authentication, Page page, List