diff --git a/views/bootstrap/class.Bootstrap.php b/views/bootstrap/class.Bootstrap.php
index 77caaee26..9792872e6 100644
--- a/views/bootstrap/class.Bootstrap.php
+++ b/views/bootstrap/class.Bootstrap.php
@@ -2496,16 +2496,18 @@ mayscript>
 				echo "<br />".htmlspecialchars($rec['comment']);
 			switch($type) {
 			case "review":
-				if($rec['file']) {
-					echo "<br />";
-					echo "<a href=\"../op/op.Download.php?documentid=".$document->getID()."&reviewlogid=".$rec['reviewLogID']."\" class=\"btn btn-mini\"><i class=\"icon-download\"></i> ".getMLText('download')."</a>";
-				}
+				if($accessop->check_controller_access('Download', array('action'=>'review')))
+					if($rec['file']) {
+						echo "<br />";
+						echo "<a href=\"../op/op.Download.php?documentid=".$document->getID()."&reviewlogid=".$rec['reviewLogID']."\" class=\"btn btn-mini\"><i class=\"icon-download\"></i> ".getMLText('download')."</a>";
+					}
 				break;
 			case "approval":
-				if($rec['file']) {
-					echo "<br />";
-					echo "<a href=\"../op/op.Download.php?documentid=".$document->getID()."&approvelogid=".$rec['approveLogID']."\" class=\"btn btn-mini\"><i class=\"icon-download\"></i> ".getMLText('download')."</a>";
-				}
+				if($accessop->check_controller_access('Download', array('action'=>'approval')))
+					if($rec['file']) {
+						echo "<br />";
+						echo "<a href=\"../op/op.Download.php?documentid=".$document->getID()."&approvelogid=".$rec['approveLogID']."\" class=\"btn btn-mini\"><i class=\"icon-download\"></i> ".getMLText('download')."</a>";
+					}
 				break;
 			}
 			echo "</td>";