diff --git a/app/policies/learning_object_policy.rb b/app/policies/learning_object_policy.rb
index faf9842e0a48c6d0652e88345ff32b3caf0b9a04..b223bcaaf43220d5a70e59d189c4a3ef2084b60e 100644
--- a/app/policies/learning_object_policy.rb
+++ b/app/policies/learning_object_policy.rb
@@ -38,9 +38,10 @@ class LearningObjectPolicy < ApplicationPolicy
   end
 
   def show?
-    return record if record.published? || user_can_moderate?
+    return record if record.published? || ( !user.nil? && user_can_moderate? )
     return record if user == record.publisher
     ## TODO: falta verificar se o +record.publisher+ é uma instituição e +user+ faz parte
+    # => return owner.users.include?(user) if owner.is_a?(Institution)  (???)
   end
 
   def index?