diff --git a/redfish-core/lib/redfish_sessions.hpp b/redfish-core/lib/redfish_sessions.hpp
index 58499a5..89008c9 100644
--- a/redfish-core/lib/redfish_sessions.hpp
+++ b/redfish-core/lib/redfish_sessions.hpp
@@ -89,7 +89,8 @@
     // then the ConfigureSelf privilege does not apply.  In that
     // case, perform the authority check again without the user's
     // ConfigureSelf privilege.
-    if (session->username != req.session->username)
+    if (req.session != nullptr && !session->username.empty() &&
+        session->username != req.session->username)
     {
         Privileges effectiveUserPrivileges =
             redfish::getUserPrivileges(req.userRole);