Fix can_change_object_store for anonymous users.

jmchilton · Feb 10, 2024 · d6ae720 · d6ae720
1 parent b4124eb
commit d6ae720
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/galaxy/model/security.py b/lib/galaxy/model/security.py
@@ -650,7 +650,7 @@ def can_change_object_store_id(self, user, dataset):
     history_dataset_association on history_dataset_association.history_id = history.id
 WHERE history.user_id != :user_id and history_dataset_association.dataset_id = :dataset_id
 """
-            ).bindparams(dataset_id=dataset.id, user_id=user.id)
+            ).bindparams(dataset_id=dataset.id, user_id=user.id if user else None)
             return self.sa_session.scalars(query).first() == 0
 
     def get_item_actions(self, action, item):