--- loncom/lonnet/perl/lonnet.pm	2005/06/17 17:09:59	1.641
+++ loncom/lonnet/perl/lonnet.pm	2005/06/17 21:04:40	1.642
@@ -1,7 +1,7 @@
 # The LearningOnline Network
 # TCP networking package
 #
-# $Id: lonnet.pm,v 1.641 2005/06/17 17:09:59 albertel Exp $
+# $Id: lonnet.pm,v 1.642 2005/06/17 21:04:40 albertel Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -2969,6 +2969,12 @@ sub allowed {
 # If this is generating or modifying users, exit with special codes
 
     if (':csu:cdc:ccc:cin:cta:cep:ccr:cst:cad:cli:cau:cdg:cca:'=~/\:\Q$priv\E\:/) {
+	if ($priv eq 'cca') {
+	    my ($audom,$auname)=split('/',$uri);
+	    if (($auname ne $env{'user.name'} && $env{'request.role'} !~ /^dc\./) ||
+		(($audom ne $env{'user.domain'} && $env{'request.role'} !~ /^dc\./) &&
+		 ($audom ne $env{'request.role.domain'}))) { return ''; }
+	}
 	return $thisallowed;
     }
 #