--- loncom/lond	2018/11/24 16:19:09	1.551
+++ loncom/lond	2018/12/03 19:32:51	1.554
@@ -2,7 +2,7 @@
 # The LearningOnline Network
 # lond "LON Daemon" Server (port "LOND" 5663)
 #
-# $Id: lond,v 1.551 2018/11/24 16:19:09 raeburn Exp $
+# $Id: lond,v 1.554 2018/12/03 19:32:51 raeburn Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -65,7 +65,7 @@ my $DEBUG = 0;		       # Non zero to ena
 my $status='';
 my $lastlog='';
 
-my $VERSION='$Revision: 1.551 $'; #' stupid emacs
+my $VERSION='$Revision: 1.554 $'; #' stupid emacs
 my $remoteVERSION;
 my $currenthostid="default";
 my $currentdomainid;
@@ -176,6 +176,7 @@ my @installerrors = ("ok",
 # shared    ("Access to other domain's content by this domain")
 # enroll    ("Enrollment in this domain's courses by others")
 # coaurem   ("Co-author roles for this domain's users elsewhere")
+# othcoau   ("Co-author roles in this domain for others")
 # domroles  ("Domain roles in this domain assignable to others")
 # catalog   ("Course Catalog for this domain displayed elsewhere")
 # reqcrs    ("Requests for creation of courses in this domain by others")
@@ -235,7 +236,7 @@ my %trust = (
                edit => {institutiononly => 1},  #not used currently
                eget => {remote => 1, domroles => 1, enroll => 1}, #not used currently
                egetdom => {remote => 1, domroles => 1, enroll => 1, },
-               ekey => {}, #not used currently
+               ekey => {anywhere => 1},
                exit => {anywhere => 1},
                fetchuserfile => {remote => 1, enroll => 1},
                get => {remote => 1, domroles => 1, enroll => 1},
@@ -300,9 +301,9 @@ my %trust = (
                store => {remote => 1, enroll => 1, reqcrs => 1,},
                studentphoto => {remote => 1, enroll => 1},
                sub => {content => 1,},
-               tmpdel => {anywhere => 1},
-               tmpget => {anywhere => 1},
-               tmpput => {anywhere => 1},
+               tmpdel => {institutiononly => 1},
+               tmpget => {institutiononly => 1},
+               tmpput => {remote => 1, othcoau => 1},
                tokenauthuserfile => {anywhere => 1},
                unsub => {content => 1,},
                update => {shared => 1},
@@ -832,8 +833,8 @@ sub PushFile {
     #   hosts.tab  ($filename eq host).
     #   domain.tab ($filename eq domain).
     #   dns_hosts.tab ($filename eq dns_host).
-    #   dns_domain.tab ($filename eq dns_domain). 
-    #   loncapaCAcrl.pem ($filename eq loncapaCAcrl);   
+    #   dns_domain.tab ($filename eq dns_domain).
+    #   loncapaCAcrl.pem ($filename eq loncapaCAcrl).
     # Construct the destination filename or reject the request.
     #
     # lonManage is supposed to ensure this, however this session could be
@@ -5551,10 +5552,10 @@ sub del_balcookie_handler {
                     chomp($line);
                     if ($line eq $clientname) {
                         $dodelete = 1;
-                        last;      
+                        last;
                     }
                 }
-                close($fh); 
+                close($fh);
                 if ($dodelete) {
                     if (unlink("$execdir/$cookie.id")) {
                         $deleted = 1;