From 9107fc766127f4b597944c316fdd3487e0a1945f Mon Sep 17 00:00:00 2001
From: Jeffrey Altman <jaltman@secure-endpoints.com>
Date: Sun, 26 Oct 2008 07:50:55 +0000
Subject: [PATCH] DEVEL15-ptutils-restricted-accessok-20081025

LICENSE MIT

Fix restricted mode test when 'any' is not set on AccessOK


(cherry picked from commit a614a8d95476ae49642d055cb0ac7942109d021e)
---
 src/ptserver/ptutils.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/ptserver/ptutils.c b/src/ptserver/ptutils.c
index 8f17b69c32..61e07e9665 100644
--- a/src/ptserver/ptutils.c
+++ b/src/ptserver/ptutils.c
@@ -294,7 +294,7 @@ AccessOK(struct ubik_trans *ut, afs_int32 cid,		/* caller id */
 	return 1;
     if (cid == SYSADMINID)
 	return 1;		/* special case fileserver */
-    if (restricted && ((mem == PRP_ADD_MEM) || (mem == any == 0)))
+    if (restricted && ((mem == PRP_ADD_MEM) || (mem == PRP_REMOVE_MEM)) && (any == 0))
 	return 0;
     if (tentry) {
 	flags = tentry->flags;