diff --git a/module/common/model.php b/module/common/model.php
index 80a5e8aa2b..beb1d06bd3 100644
--- a/module/common/model.php
+++ b/module/common/model.php
@@ -2194,7 +2194,7 @@ EOD;
 
         if(isset($this->app->user))
         {
-            if(in_array($module, $this->config->programPriv->waterfall)) return true;
+            if(in_array($module, $this->config->programPriv->waterfall) and $this->app->tab == 'project') return true;
 
             $this->app->user = $this->session->user;
             if(!commonModel::hasPriv($module, $method)) $this->deny($module, $method);