=== modified file 'dhis-2/dhis-services/dhis-service-dxf2/src/main/java/org/hisp/dhis/dxf2/events/event/AbstractEventService.java' --- dhis-2/dhis-services/dhis-service-dxf2/src/main/java/org/hisp/dhis/dxf2/events/event/AbstractEventService.java 2015-11-20 11:38:58 +0000 +++ dhis-2/dhis-services/dhis-service-dxf2/src/main/java/org/hisp/dhis/dxf2/events/event/AbstractEventService.java 2015-11-23 13:50:52 +0000 @@ -538,12 +538,12 @@ } } - if( pr == null && !userCredentials.isSuper() && userCredentials.getAllPrograms().size() == 0 ) + if( pr != null && !userCredentials.isSuper() && userCredentials.getAllPrograms().size() == 0 ) { throw new IllegalQueryException( "User has no access to programs"); } - if( pr != null && userCredentials.getAllPrograms().contains( pr ) ) + if( pr != null && !userCredentials.getAllPrograms().contains( pr ) ) { throw new IllegalQueryException( "User has no access to program: " + pr.getUid() ); }