=== modified file 'dhis-2/dhis-web/dhis-web-api/src/main/java/org/hisp/dhis/webapi/controller/user/CurrentUserController.java'
--- dhis-2/dhis-web/dhis-web-api/src/main/java/org/hisp/dhis/webapi/controller/user/CurrentUserController.java	2014-08-15 07:02:10 +0000
+++ dhis-2/dhis-web/dhis-web-api/src/main/java/org/hisp/dhis/webapi/controller/user/CurrentUserController.java	2014-08-15 07:10:46 +0000
@@ -33,6 +33,7 @@
 import org.hisp.dhis.acl.AclService;
 import org.hisp.dhis.common.IdentifiableObjectManager;
 import org.hisp.dhis.common.view.DetailedView;
+import org.hisp.dhis.dashboard.DashboardItem;
 import org.hisp.dhis.dataelement.DataElement;
 import org.hisp.dhis.dataset.DataSet;
 import org.hisp.dhis.dataset.DataSetService;
@@ -168,6 +169,11 @@
         for ( org.hisp.dhis.dashboard.Dashboard dashboard : dashboards )
         {
             dashboard.setAccess( aclService.getAccess( dashboard ) );
+
+            for ( DashboardItem dashboardItem : dashboard.getItems() )
+            {
+                dashboardItem.setAccess( aclService.getAccess( dashboardItem ) );
+            }
         }
 
         response.setContentType( MediaType.APPLICATION_JSON_VALUE );