diff --git a/queries/trunk/app/views/projects/list_issues.rhtml b/queries/trunk/app/views/projects/list_issues.rhtml
index 1add26497..cebddff3a 100644
--- a/queries/trunk/app/views/projects/list_issues.rhtml
+++ b/queries/trunk/app/views/projects/list_issues.rhtml
@@ -20,7 +20,7 @@
                        :with => "Form.serialize('query_form')" %> 
     |
     <%= link_to l(:button_clear), :controller => 'projects', :action => 'list_issues', :id => @project, :set_filter => 1 %>
-    <% if loggedin? %>
+    <% if authorize_for('projects', 'add_query') %>
     |
     <%= link_to_remote l(:button_save), 
                        :url => { :controller => 'projects', :action => "add_query", :id => @project },
@@ -32,11 +32,12 @@
     </tr>
     </table>
 <% else %>
+    <% if authorize_for('projects', 'add_query') %>
     <div style="float:right;">
         <%= link_to l(:button_edit), :controller => 'queries', :action => 'edit', :id => @query %>
         <%= link_to l(:button_delete), {:controller => 'queries', :action => 'destroy', :id => @query}, :confirm => l(:text_are_you_sure), :post => true %>
     </div>
-    
+    <% end %>
     <h2><%= @query.name %></h2>
 <% end %>
 <%= error_messages_for 'query' %>