diff --git a/attract/routes.py b/attract/routes.py
index 7b6517a..2254028 100644
--- a/attract/routes.py
+++ b/attract/routes.py
@@ -118,6 +118,10 @@ def attract_project_view(extra_project_projections: dict=None, extension_props=F
                 # just pass everything along.
                 return wrapped(project_url, *args, **kwargs)
 
+            if current_user.is_anonymous:
+                log.debug('attract_project_view: Anonymous user never has access to Attract.')
+                raise wz_exceptions.Forbidden()
+
             api = pillar_api()
 
             projection_param = None if full_project else {'projection': projections}