[LON-CAPA-cvs] cvs: loncom /lonnet/perl lonnet.pm

[albertel]

albertel		Tue Oct 18 17:27:47 2005 EDT

  Modified files:              
    /loncom/lonnet/perl	lonnet.pm 
  Log:
  - was allowing IN et al unrestricted access to a users uploaded space
  
  
Index: loncom/lonnet/perl/lonnet.pm
diff -u loncom/lonnet/perl/lonnet.pm:1.664 loncom/lonnet/perl/lonnet.pm:1.665
--- loncom/lonnet/perl/lonnet.pm:1.664	Fri Oct 14 15:08:42 2005
+++ loncom/lonnet/perl/lonnet.pm	Tue Oct 18 17:27:46 2005
@@ -1,7 +1,7 @@
 # The LearningOnline Network
 # TCP networking package
 #
-# $Id: lonnet.pm,v 1.664 2005/10/14 19:08:42 albertel Exp $
+# $Id: lonnet.pm,v 1.665 2005/10/18 21:27:46 albertel Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -3076,9 +3076,10 @@
        $thisallowed.=$1;
     }
 
-# URI is an uploaded document for this course
+# URI is an uploaded document for this course, default permissions don't matter
 # not allowing 'edit' access (editupload) to uploaded course docs
     if (($priv eq 'bre') && ($uri=~m|^uploaded/|)) {
+	$thisallowed='';
 	my $refuri=$env{'httpref.'.$orguri};
 	if ($refuri) {
 	    if ($refuri =~ m|^/adm/|) {