--- loncom/interface/lonsource.pm	2017/09/29 19:18:10	1.37
+++ loncom/interface/lonsource.pm	2017/10/07 21:07:17	1.38
@@ -1,7 +1,7 @@
 # The LearningOnline Network with CAPA
 # Source Code handler
 #
-# $Id: lonsource.pm,v 1.37 2017/09/29 19:18:10 raeburn Exp $
+# $Id: lonsource.pm,v 1.38 2017/10/07 21:07:17 raeburn Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -366,9 +366,13 @@ sub handler {
                 &Apache::lonenc::check_decrypt(\$filename);
                 if (($env{'request.role.domain'} eq $cdom) && ($filename =~ /$LONCAPA::assess_re/)) {
                     my ($auname) = ($filename =~ m{^\Q/res/$cdom/\E($match_username)/});
-                    if (($env{'request.course.adhocsrcaccess'} ne '') &&
+                    if (($auname ne '') && ($env{'request.course.adhocsrcaccess'} ne '') &&
                         (grep(/^\Q$auname\E$/,split(/,/,$env{'request.course.adhocsrcaccess'})))) {
                         $canview = 1;
+                    } elsif ((&Apache::lonnet::metadata($filename) eq 'open') &&
+                             ($filename =~ m{^\Q/res/$cdom/}) &&
+                             (&Apache::lonnet::allowed('bre','/'))) {
+                        $canview = 1;
                     }
                 }
             }