Don't give directory owners any implicit rights. Volume owners still

have their implicit rights.

diff --git a/src/viced/afsfileprocs.c b/src/viced/afsfileprocs.c
index 751857e..a65abc3 100644 (file)
--- a/src/viced/afsfileprocs.c
+++ b/src/viced/afsfileprocs.c
@@ -5556,8 +5556,6 @@ Check_PermissionRights(targetptr, client, rights, CallingRoutine, InStatus)
                    /* grant admins fetch on all directories */
                    && VanillaUser(client)
 #endif /* ADMIN_IMPLICIT_LOOKUP */
-                   && !OWNSp(client, targetptr)
-                   && !acl_IsAMember(targetptr->disk.owner, &client->CPS)
                    && !VolumeOwner(client, targetptr))
                    return(EACCES);
            } else {    /* file */
@@ -5615,8 +5613,6 @@ Check_PermissionRights(targetptr, client, rights, CallingRoutine, InStatus)
          else {
            if (CallingRoutine == CHK_STOREACL) {
              if (!(rights & PRSFS_ADMINISTER) &&
-                 !OWNSp(client, targetptr) && 
-                 !acl_IsAMember(targetptr->disk.owner, &client->CPS) &&
                  !VolumeOwner(client, targetptr)) return(EACCES);
            }
            else {      /* store data or status */