--- a/app/soc/views/models/request.py	Sat Nov 29 18:30:58 2008 +0000
+++ b/app/soc/views/models/request.py	Sat Nov 29 19:00:03 2008 +0000
@@ -137,13 +137,13 @@
       kwargs: not used
     """
 
+    params = dicts.merge(params, self._params)
+
     try:
-      self.checkAccess('listSelf', request)
+      access.checkAccess('listSelf', request, params['rights'])
     except out_of_band.Error, error:
       return error.response(request)
 
-    params = dicts.merge(params, self._params)
-
     # get the current user
     properties = {'account': users.get_current_user()}
     user_entity = user_logic.logic.getForFields(properties, unique=True)