diff --git a/mayan/apps/acls/managers.py b/mayan/apps/acls/managers.py index 2bc9f457ff..0cb07b5987 100644 --- a/mayan/apps/acls/managers.py +++ b/mayan/apps/acls/managers.py @@ -239,6 +239,9 @@ class AccessControlListManager(models.Manager): ) def restrict_queryset(self, permission, queryset, user): + if not user.is_authenticated(): + return queryset.none() + # Check directly granted permission via a role try: Permission.check_user_permissions(