This issue is still occurring.. the root cause is related to phabricator being set to allow-public. My fix still works and it would be nice if anyone here would support me bringing this upstream.

Yes sure. But in the case I've described above the user has access to diffusion (is member of the project having the diffusion application permission).

Again, this issue is still relevant. Updating did again break it.

This issue is still relevant and reproducible in the current release.
Here are the steps to reproduce it:

I just tested it and it seems like removing the line solves the problem.

Got the same problem with only one of my repos (~ 50MB, largest one).
Reverting the commit mentioned by @dtf fixed the problem.

I'm using CentOS 6.7. I could reproduce the problem on 3 centos servers.
Debian seems to work fine.