@@ -, +, @@ --- Koha/REST/V1/Auth.pm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/Koha/REST/V1/Auth.pm +++ a/Koha/REST/V1/Auth.pm @@ -229,7 +229,7 @@ sub authenticate_api_request { my $permissions = $authorization->{'permissions'}; # Check if the user is authorized - if ( haspermission($user->userid, $permissions) + if ( ( defined($permissions) and haspermission($user->userid, $permissions) ) or allow_owner($c, $authorization, $user) or allow_guarantor($c, $authorization, $user) ) { --