Ensure scope exists when checking employee grants.

jewel-andraia · Mar 8, 2016 · b6da389 · b6da389
1 parent 35616f7
commit b6da389
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/r2/r2/controllers/oauth2.py b/r2/r2/controllers/oauth2.py
@@ -102,7 +102,7 @@ def _error_response(self, state, redirect_uri, as_fragment=False):
         return self.redirect(final_redirect, code=302)
 
     def _check_employee_grants(self, client, scope):
-        if not c.user.employee or not client:
+        if not c.user.employee or not client or not scope:
             return
         if client._id in g.employee_approved_clients:
             return