From 8080342620db3313e0584bd54f102b3aad543e3f Mon Sep 17 00:00:00 2001
From: Helmut Merz <helmutm@cy55.de>
Date: Tue, 1 Dec 2015 20:47:26 +0100
Subject: [PATCH] don't try to get a view for an object the user does not have
 access to

---
 organize/tracking/report.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/organize/tracking/report.py b/organize/tracking/report.py
index 91b7012..0e56c47 100644
--- a/organize/tracking/report.py
+++ b/organize/tracking/report.py
@@ -264,7 +264,7 @@ class TrackDetails(BaseView):
     @Lazy
     def objectData(self):
         obj = self.object
-        if obj is None:
+        if obj is None or not canAccessObject(obj):
             return dict(object=None, title='-', description='',
                         type='-', url='', 
                         version=None, canAccess=False)
@@ -283,7 +283,7 @@ class TrackDetails(BaseView):
                     versionable.versionId) or '')
         return dict(object=obj, title=title, description=desc,
                     type=self.longTypeTitle, url=url, version=version,
-                    canAccess=canAccessObject(obj))
+                    canAccess=True)
 
     @Lazy
     def user(self):