Fixes

arkindex/project/mixins.py

@@ -20,6 +20,8 @@ class ACLMixin(object):
     """
     Access control mixin using the generic Right table.
     """
+    self._user = None
+
     def __init__(self, user=None):
         self._user = user
 
@@ -33,7 +35,9 @@ class ACLMixin(object):
         # Handle special authentications
         if level <= Role.Guest.value and getattr(instance, 'public', False):
             return True
-        if self.user.is_admin or self.user.is_internal:
+        if self.user.is_anonymous:
+            return False
+        elif self.user.is_admin or self.user.is_internal:
             return True
 
         return instance.memberships.filter(