diff --git a/app/controllers/dmsf_controller.rb b/app/controllers/dmsf_controller.rb
index c1522b81..2a4d491a 100644
--- a/app/controllers/dmsf_controller.rb
+++ b/app/controllers/dmsf_controller.rb
@@ -49,7 +49,7 @@ class DmsfController < ApplicationController
   def permissions
     if !DmsfFolder.permissions?(@folder, false)
       render_403
-    elsif(@folder && (@folder.project != @project))
+    elsif(@folder && @project && (@folder.project != @project))
       render_404
     end
     true