--- loncom/interface/lonwhatsnew.pm	2005/12/22 03:39:39	1.42
+++ loncom/interface/lonwhatsnew.pm	2006/01/06 21:04:34	1.43
@@ -1,5 +1,5 @@
 #
-# $Id: lonwhatsnew.pm,v 1.42 2005/12/22 03:39:39 raeburn Exp $
+# $Id: lonwhatsnew.pm,v 1.43 2006/01/06 21:04:34 albertel Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -60,12 +60,13 @@ sub handler {
 
     &Apache::loncommon::content_type($r,'text/html');
     $r->send_http_header;
-    my $crsid = $env{'request.course.id'};
-    $crsid =~ s/_/\//; 
-    if ((!($env{'request.course.fn'})) || 
-                             (!(&Apache::lonnet::allowed('whn',
-                                                $env{'request.course.id'})))) {
-        # Not in a course, or no role in course
+
+    if ( ! $env{'request.course.fn'} 
+	 ||
+	 (!( &Apache::lonnet::allowed('whn',$env{'request.course.id'})
+	     || &Apache::lonnet::allowed('whn',$env{'request.course.id'}
+					 .'/'.$env{'request.course.sec'})))) {
+        # Not in a course, or no whn priv in course
         $env{'user.error.msg'}="/adm/whatsnew::whn:0:0:Cannot display what's new page";
         return HTTP_NOT_ACCEPTABLE;
     }