diff --git a/src/main/java/eu/hbp/mip/services/ExperimentService.java b/src/main/java/eu/hbp/mip/services/ExperimentService.java index 327f9ecf822be51a46e28a6b867b0c2d4e5e968e..12d923f12a30a6144925c7a4b12cfd5efbb85b32 100644 --- a/src/main/java/eu/hbp/mip/services/ExperimentService.java +++ b/src/main/java/eu/hbp/mip/services/ExperimentService.java @@ -124,11 +124,11 @@ public class ExperimentService { logger.LogUserAction("Loading Experiment with uuid : " + uuid); experimentDAO = experimentRepository.loadExperiment(uuid, logger); - if ( - !experimentDAO.isShared() - && !experimentDAO.getCreatedBy().getUsername().equals(user.getUsername()) - && authenticationIsEnabled - && ClaimUtils.validateAccessRightsOnExperiments(authentication, logger) + if ( + authenticationIsEnabled + && !experimentDAO.isShared() + && !experimentDAO.getCreatedBy().getUsername().equals(user.getUsername()) + && !ClaimUtils.validateAccessRightsOnExperiments(authentication, logger) ) { logger.LogUserAction("Accessing Experiment is unauthorized."); throw new UnauthorizedException("You don't have access to the experiment.");