From 8b06de9613c0b8416f468e920244ab5ef2dae5d3 Mon Sep 17 00:00:00 2001
From: Nick Winter <livelily@gmail.com>
Date: Fri, 20 Mar 2015 07:10:47 -0700
Subject: [PATCH] Requests without users can't save poll votes.

---
 server/polls/user_polls_record_handler.coffee | 1 +
 1 file changed, 1 insertion(+)

diff --git a/server/polls/user_polls_record_handler.coffee b/server/polls/user_polls_record_handler.coffee
index 83e29746e..36b81298a 100644
--- a/server/polls/user_polls_record_handler.coffee
+++ b/server/polls/user_polls_record_handler.coffee
@@ -25,6 +25,7 @@ UserPollsRecordHandler = class UserPollsRecordHandler extends Handler
       @createAndSaveNewUserPollsRecord userID, req, res
 
   createAndSaveNewUserPollsRecord: (userID, req, res) =>
+    return @sendForbiddenError(res) unless req.user
     initVals = user: userID, polls: {}, level: req.user.level()
     userPollsRecord = new UserPollsRecord initVals
     userPollsRecord.save (err) =>