From: Jeffrey Altman <jaltman@secure-endpoints.com>
Date: Sun, 26 Oct 2008 07:50:55 +0000 (+0000)
Subject: DEVEL15-ptutils-restricted-accessok-20081025
X-Git-Tag: openafs-devel-1_5_55~24
X-Git-Url: https://git.michaelhowe.org/gitweb/?a=commitdiff_plain;h=9107fc766127f4b597944c316fdd3487e0a1945f;p=packages%2Fo%2Fopenafs.git

DEVEL15-ptutils-restricted-accessok-20081025

LICENSE MIT

Fix restricted mode test when 'any' is not set on AccessOK


(cherry picked from commit a614a8d95476ae49642d055cb0ac7942109d021e)
---

diff --git a/src/ptserver/ptutils.c b/src/ptserver/ptutils.c
index 8f17b69c3..61e07e966 100644
--- a/src/ptserver/ptutils.c
+++ b/src/ptserver/ptutils.c
@@ -294,7 +294,7 @@ AccessOK(struct ubik_trans *ut, afs_int32 cid,		/* caller id */
 	return 1;
     if (cid == SYSADMINID)
 	return 1;		/* special case fileserver */
-    if (restricted && ((mem == PRP_ADD_MEM) || (mem == any == 0)))
+    if (restricted && ((mem == PRP_ADD_MEM) || (mem == PRP_REMOVE_MEM)) && (any == 0))
 	return 0;
     if (tentry) {
 	flags = tentry->flags;