diff --git a/models/workflow/workflow.go b/models/workflow/workflow.go
index 52bbf96..09815d4 100644
--- a/models/workflow/workflow.go
+++ b/models/workflow/workflow.go
@@ -91,8 +91,9 @@ func (ao *Workflow) VerifyAuth(request *tools.APIRequest) bool {
 			shared, code, _ := shallow_collaborative_area.NewAccessor(request).LoadOne(shared)
 			if code != 200 || shared == nil {
 				isAuthorized = false
+			} else {
+				isAuthorized = shared.VerifyAuth(request)
 			}
-			isAuthorized = shared.VerifyAuth(request)
 		}
 	}
 	return ao.AbstractObject.VerifyAuth(request) || isAuthorized