diff --git a/projects/cadcAccessControl-Server/src/ca/nrc/cadc/ac/server/web/users/GetUserAction.java b/projects/cadcAccessControl-Server/src/ca/nrc/cadc/ac/server/web/users/GetUserAction.java
index dfef465d1e458e08465df2ddf9952b15dfe15d34..feece385d349c6cbcdfac69778abecb0dd4c5960 100644
--- a/projects/cadcAccessControl-Server/src/ca/nrc/cadc/ac/server/web/users/GetUserAction.java
+++ b/projects/cadcAccessControl-Server/src/ca/nrc/cadc/ac/server/web/users/GetUserAction.java
@@ -140,12 +140,15 @@ public class GetUserAction extends AbstractUserAction
     	boolean isServops = false;
         AccessControlContext acc = AccessController.getContext();
         Subject subject = Subject.getSubject(acc);
-        for (Principal principal : subject.getPrincipals())
+        if (subject != null)
         {
-        	if (principal.getName().equals(this.getAugmentUserDN()))
+        	for (Principal principal : subject.getPrincipals())
         	{
-        		isServops = true;
-        		break;
+        		if (principal.getName().equals(this.getAugmentUserDN()))
+        		{
+        			isServops = true;
+        			break;
+        		}
         	}
         }