--- loncom/auth/lonacc.pm	2009/10/20 01:57:38	1.129
+++ loncom/auth/lonacc.pm	2009/11/03 03:06:07	1.130
@@ -1,7 +1,7 @@
 # The LearningOnline Network
 # Cookie Based Access Handler
 #
-# $Id: lonacc.pm,v 1.129 2009/10/20 01:57:38 raeburn Exp $
+# $Id: lonacc.pm,v 1.130 2009/11/03 03:06:07 raeburn Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -449,8 +449,16 @@ sub handler {
                 return OK;
             }
 	    if (($access ne '2') && ($access ne 'F')) {
-		$env{'user.error.msg'}="$requrl:bre:1:1:Access Denied";
-		return HTTP_NOT_ACCEPTABLE; 
+                if ($requrl =~ m{^/res/}) {
+                    $access = &Apache::lonnet::allowed('bro',$requrl);
+                    if ($access ne 'F') {
+                        $env{'user.error.msg'}="$requrl:bre:1:1:Access Denied";
+                        return HTTP_NOT_ACCEPTABLE;
+                    }
+                } else {
+		    $env{'user.error.msg'}="$requrl:bre:1:1:Access Denied";
+		    return HTTP_NOT_ACCEPTABLE;
+                }
 	    }
 	}
 	if ($requrl =~ m|^/prtspool/|) {