--- loncom/lonnet/perl/lonnet.pm	2000/12/14 21:44:06	1.81
+++ loncom/lonnet/perl/lonnet.pm	2000/12/28 19:57:30	1.82
@@ -81,7 +81,7 @@
 # 10/06,10/09,10/10,10/11,10/14,10/20,10/23,10/25,10/26,10/27,10/28,10/29, 
 # 10/30,10/31,
 # 11/2,11/14,11/15,11/16,11/20,11/21,11/22,11/25,11/27,
-# 12/02,12/12,12/13,12/14 Gerd Kortemeyer
+# 12/02,12/12,12/13,12/14,12/28 Gerd Kortemeyer
 
 package Apache::lonnet;
 
@@ -1170,7 +1170,9 @@ sub assignrole {
 	unless (&allowed('ccr',$url)) { return 'refused'; }
         $mrole='cr';
     } else {
-        unless (&allowed('c'.$role,$url)) { return 'refused'; }
+        my $cwosec=$url;
+        $cwosec=~s/^(\w+)\/(\w+)\/.*/$1\/$2/;
+        unless (&allowed('c'.$role,$cwosec)) { return 'refused'; }
         $mrole=$role;
     }
     my $command="encrypt:rolesput:$ENV{'user.domain'}:$ENV{'user.name'}:".