--- a/mercurial/hgweb/protocol.py	Tue Feb 20 18:54:27 2018 -0800
+++ b/mercurial/hgweb/protocol.py	Tue Feb 20 18:55:58 2018 -0800
@@ -52,6 +52,7 @@
         self.response = ''
         self.ui = ui
         self.name = 'http'
+        self.checkperm = req.checkperm
 
     def getargs(self, args):
         knownargs = self._args()