Return empty queryset for non authenticated users

Signed-off-by: Roberto Rosario <roberto.rosario@mayan-edms.com>

mayan/apps/acls/managers.py

@@ -239,6 +239,9 @@ class AccessControlListManager(models.Manager):
             )
 
     def restrict_queryset(self, permission, queryset, user):
+        if not user.is_authenticated():
+            return queryset.none()
+
         # Check directly granted permission via a role
         try:
             Permission.check_user_permissions(