=== modified file 'dhis-2/dhis-web/dhis-web-api/src/main/java/org/hisp/dhis/api/controller/SharingController.java' --- dhis-2/dhis-web/dhis-web-api/src/main/java/org/hisp/dhis/api/controller/SharingController.java 2013-03-21 06:43:08 +0000 +++ dhis-2/dhis-web/dhis-web-api/src/main/java/org/hisp/dhis/api/controller/SharingController.java 2013-03-22 05:16:10 +0000 @@ -114,8 +114,18 @@ if ( sharing.getObject().getPublicAccess() == null ) { - String rw = AccessStringHelper.newInstance().enable( AccessStringHelper.Permission.READ ).enable( AccessStringHelper.Permission.WRITE ).build(); - sharing.getObject().setPublicAccess( rw ); + String access; + + if ( SharingUtils.canCreatePublic( currentUserService.getCurrentUser(), type ) ) + { + access = AccessStringHelper.newInstance().enable( AccessStringHelper.Permission.READ ).enable( AccessStringHelper.Permission.WRITE ).build(); + } + else + { + access = AccessStringHelper.newInstance().build(); + } + + sharing.getObject().setPublicAccess( access ); } else {