From bd5ed7d332df05ac232f4188a166ce6f791f7cca Mon Sep 17 00:00:00 2001
From: Jeffrey Altman <jaltman@secure-endpoints.com>
Date: Thu, 1 Feb 2007 04:28:37 +0000
Subject: [PATCH] windows-freelance-20070131

FIXES 52069

If an app tries to open the freelance directory for WRITE then the
default anonymous access privileges, read/lookup, are not sufficient
and cm_HaveAccessRights will fail.  Freelance can't get access rights
from anywhere.  Therefore, cm_HaveAccessRights should special case
the Freelance directory.
---
 src/WINNT/afsd/cm_access.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/src/WINNT/afsd/cm_access.c b/src/WINNT/afsd/cm_access.c
index 3b16c101e5..ba747a8086 100644
--- a/src/WINNT/afsd/cm_access.c
+++ b/src/WINNT/afsd/cm_access.c
@@ -76,6 +76,12 @@ int cm_HaveAccessRights(struct cm_scache *scp, struct cm_user *userp, afs_uint32
      * Otherwise, if we an explicit acl entry, we're also in good shape,
      * and can definitively answer.
      */
+#ifdef AFS_FREELANCE_CLIENT
+    if (cm_freelanceEnabled && aclScp == cm_data.rootSCachep)
+    {
+    	*outRightsp = aclScp->anyAccess;
+    } else
+#endif
     if ((~aclScp->anyAccess & rights) == 0) {
         *outRightsp = rights;
     } else {