SCA page throws an exception for anonymous users

[pg_user_8607]

Hi there,

i'm getting a 500 error page when calling the SCA page as anonymous user.

Configuration:

• Web.HideHomePageFromAnonymousUser = true
• Some feeds are intentionally accessible to anonymous users

The home page behaves as expected and redirects anonymous users to the login page.

However, some URLs are still directly accessible anonymously (as expected), for example:

• http://proget-test.some-corp-com/feeds

Accessing the SCA page from there anonymously causes an application error:

• http://proget-test.some-corp-com/sca

An error occurred in the web application: Object reference not set to an instance of an object.

URL: http://proget-test.some-corp-com/sca
Referrer: (not set)
User: (unknown)
User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 Edg/148.0.0.0
IP Address: XX.XXX.XX.XX
Stack trace:    at Inedo.ProGet.WebApplication.Pages.Sca.ScaOverviewPage.Inedo.ProGet.WebApplication.IPrivilegesValidator.ValidatePrivileges() in C:\Users\builds\AppData\Local\Temp\InedoAgent\BuildMaster\192.168.44.60\Temp\_E655333\Src\src\ProGet\WebApplication\Pages\Sca\ScaOverviewPage.cs:line 185
   at Inedo.ProGet.WebApplication.ProGetHttpModule.ValidatePrivileges(AhHttpApplication app, IHttpAsyncHandler handler) in C:\Users\builds\AppData\Local\Temp\InedoAgent\BuildMaster\192.168.44.60\Temp\_E655333\Src\src\ProGet\WebApplication\ProGetHttpModule.cs:line 434
   at Inedo.ProGet.WebApplication.ProGetHttpModule.PostMapRequestHandlerAsync(AhHttpApplication app) in C:\Users\builds\AppData\Local\Temp\InedoAgent\BuildMaster\192.168.44.60\Temp\_E655333\Src\src\ProGet\WebApplication\ProGetHttpModule.cs:line 406
   at Inedo.Web.AhWebMiddleware.InvokeAsync(HttpContext context)

::Web Error on 06/01/2026 15:51:49::

Version info:

Connection String: 
Web UI Version: 2026.2 (Build 16)
Database Schema Version: 26.0.2.16
SQL Server Version: PostgreSQL 17.7 on x86_64-pc-linux-musl, compiled by gcc (Alpine 15.2.0) 15.2.0, 64-bit
db_owner: True
Database Name: proget
Database Collation: C (UTF8)
Database Recovery Model: Default (1)
Database Read Committed Snapshot: True
Database Auto Update Stats: True

[atripp]

Hi @pg_user_8607 ,

Thanks for the bug report; this will be fixed via PG-3296 in the next maintenance release (scheduled next Friday). It was a problem in the redirect to the /log-in page, so of course if you log-in first, the error will not occur.

Cheers,
Alana