diff --git a/pagure/templates/pull_request.html b/pagure/templates/pull_request.html
index c58a199..1c547bc 100644
--- a/pagure/templates/pull_request.html
+++ b/pagure/templates/pull_request.html
@@ -40,7 +40,8 @@
           <input class="button" type="submit" value="Merge"/>
         </form>
       </li>
-  {% elif pull_request.status == 'Open' and (repo_admin or g.fas_user.username == pull_request.user.username) %}
+  {% elif pull_request.status == 'Open' and
+        (repo_admin or g.fas_user.username == pull_request.user.username) %}
       <li>
         <form action="{{ url_for('cancel_request_pull', username=username,
             repo=repo.name, requestid=requestid) }}" method="POST">
diff --git a/pagure/ui/fork.py b/pagure/ui/fork.py
index adc0621..f6a51fb 100644
--- a/pagure/ui/fork.py
+++ b/pagure/ui/fork.py
@@ -628,7 +628,8 @@ def cancel_request_pull(repo, requestid, username=None):
         if not request:
             flask.abort(404, 'Pull-request not found')
 
-        if not is_repo_admin(repo_obj) and not flask.g.fas_user.username:
+        if not is_repo_admin(repo_obj) \
+            and not flask.g.fas_user.username == request.user.username:
           flask.abort(
               403,
               'You are not allowed to cancel pull-request for this project')