--- loncom/interface/lonsource.pm 2005/06/23 23:51:32 1.14 +++ loncom/interface/lonsource.pm 2005/07/08 10:39:49 1.15 @@ -1,7 +1,7 @@ # The LearningOnline Network with CAPA # Souce Code handler # -# $Id: lonsource.pm,v 1.14 2005/06/23 23:51:32 www Exp $ +# $Id: lonsource.pm,v 1.15 2005/07/08 10:39:49 www Exp $ # # Copyright Michigan State University Board of Trustees # @@ -214,7 +214,8 @@ sub handler { $env{'user.error.msg'}="$filename:cre:1:1:Source code not available"; return HTTP_NOT_ACCEPTABLE; } - unless (&Apache::lonnet::allowed('bre',$filename)) { + unless ((&Apache::lonnet::allowed('bre',$filename)) && + (&Apache::lonnet::allowed('cre','/'))) { $env{'user.error.msg'}="$filename:bre:1:1:Access to resource denied"; return HTTP_NOT_ACCEPTABLE; }