From 7e334e3559f2da03d10b34f5a8a7a30741b88189 Mon Sep 17 00:00:00 2001
From: James Muehlner <james.muehlner@guac-dev.org>
Date: Thu, 15 Aug 2013 01:07:07 -0700
Subject: [PATCH] Ticket #263: Group admins can use connection groups however
 they wish.

---
 .../net/auth/mysql/service/PermissionCheckService.java       | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/extensions/guacamole-auth-mysql/src/main/java/net/sourceforge/guacamole/net/auth/mysql/service/PermissionCheckService.java b/extensions/guacamole-auth-mysql/src/main/java/net/sourceforge/guacamole/net/auth/mysql/service/PermissionCheckService.java
index 9379389d4..6144ca88a 100644
--- a/extensions/guacamole-auth-mysql/src/main/java/net/sourceforge/guacamole/net/auth/mysql/service/PermissionCheckService.java
+++ b/extensions/guacamole-auth-mysql/src/main/java/net/sourceforge/guacamole/net/auth/mysql/service/PermissionCheckService.java
@@ -333,6 +333,11 @@ public class PermissionCheckService {
         if(checkSystemAdministratorAccess(userID))
             return true;
         
+        // A connection group administrator can use the group either way.
+        if(checkConnectionGroupAccess(userID, connectionGroupID,
+                MySQLConstants.CONNECTION_GROUP_ADMINISTER))
+            return true;
+        
         // Query the connection group
         MySQLConnectionGroup connectionGroup = connectionGroupService.
                 retrieveConnectionGroup(connectionGroupID, userID);