From: Jeffrey Altman <jaltman@secure-endpoints.com>
Date: Sun, 26 Oct 2008 07:51:37 +0000 (+0000)
Subject: STABLE14-ptutils-restricted-accessok-20081025
X-Git-Tag: openafs-stable-1_4_8~6
X-Git-Url: https://git.michaelhowe.org/gitweb/?a=commitdiff_plain;h=02e191d208d89a1dc7927ed7ed97d739a399c3d9;p=packages%2Fo%2Fopenafs.git

STABLE14-ptutils-restricted-accessok-20081025

LICENSE MIT

Fix restricted mode test when 'any' is not set on AccessOK


(cherry picked from commit a614a8d95476ae49642d055cb0ac7942109d021e)
---

diff --git a/src/ptserver/ptutils.c b/src/ptserver/ptutils.c
index 3c2b83b69..0b5bba49d 100644
--- a/src/ptserver/ptutils.c
+++ b/src/ptserver/ptutils.c
@@ -294,7 +294,7 @@ AccessOK(struct ubik_trans *ut, afs_int32 cid,		/* caller id */
 	return 1;
     if (cid == SYSADMINID)
 	return 1;		/* special case fileserver */
-    if (restricted && ((mem == PRP_ADD_MEM) || (mem == any == 0)))
+    if (restricted && ((mem == PRP_ADD_MEM) || (mem == PRP_REMOVE_MEM)) && (any == 0))
 	return 0;
     if (tentry) {
 	flags = tentry->flags;